last executing test programs:

9.602289686s ago: executing program 1 (id=2936):
r0 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0x13, &(0x7f0000000240)=ANY=[@ANYBLOB="180300000005000000000000000000001801000011af000000000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000d5030000020000838500000071000000180100002020752500000000806020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b703000000000000850000000400000095"], &(0x7f0000000200)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0xf, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94)
r1 = bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000001c0)={&(0x7f0000000140)='kmem_cache_free\x00', r0}, 0x10)
r2 = socket$nl_netfilter(0x10, 0x3, 0xc)
sendmsg$IPSET_CMD_CREATE(r2, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000680)={0x58, 0x2, 0x6, 0x3, 0x0, 0x0, {0x0, 0x0, 0x7}, [@IPSET_ATTR_PROTOCOL={0x5}, @IPSET_ATTR_SETNAME={0x9, 0x2, 'syz1\x00'}, @IPSET_ATTR_DATA={0xc, 0x7, 0x0, 0x1, [@IPSET_ATTR_MAXELEM={0x8, 0x13, 0x0}]}, @IPSET_ATTR_FAMILY={0x5, 0x5, 0x2}, @IPSET_ATTR_REVISION={0x5, 0x4, 0x1}, @IPSET_ATTR_TYPENAME={0x13, 0x3, 'hash:net,iface\x00'}]}, 0x58}, 0x1, 0x0, 0x0, 0x4000}, 0x20004000)
r3 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10)
r4 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10)
r5 = syz_genetlink_get_family_id$nfc(&(0x7f0000000fc0), r3)
sendmsg$NFC_CMD_SE_IO(r4, &(0x7f0000001180)={0x0, 0x31, &(0x7f0000000040)={&(0x7f0000000080)=ANY=[@ANYRES64=r4, @ANYRES16=r5, @ANYBLOB="01001500020000000400190008000100"/30, @ANYRES64=r1], 0x28}, 0x1, 0x0, 0x0, 0x260400c4}, 0x2400cc84)
r6 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000001c0)='memory.current\x00', 0x275a, 0x0)
write$cgroup_pid(r6, &(0x7f0000000000), 0x2a979d)
write$cgroup_int(r6, &(0x7f0000000000)=0x7cabfab6, 0x12)
ioctl$SIOCPNENABLEPIPE(r6, 0x89ed, 0x0)
mmap(&(0x7f0000000000/0xff5000)=nil, 0xff5000, 0x0, 0x4ca31, 0xffffffffffffffff, 0x0)

9.209649897s ago: executing program 1 (id=2938):
sendmmsg$inet(0xffffffffffffffff, &(0x7f0000000280)=[{{&(0x7f00000001c0)={0x2, 0x0, @remote}, 0x10, &(0x7f0000000000)=[{&(0x7f0000000200)="82f57c000200000000000000000000000004acf3", 0x14}], 0x1}}], 0x1, 0x24004044)
r0 = syz_init_net_socket$nl_rdma(0x10, 0x3, 0x10)
r1 = socket(0x2a, 0x2, 0x0)
getsockname$packet(r1, &(0x7f0000000200)={0x11, 0x0, <r2=>0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000001480)=0x14)
sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000280)={&(0x7f0000001000)=@newqdisc={0x2c, 0x24, 0xf0b, 0x0, 0x0, {0x0, 0x0, 0x0, r2, {}, {0xffff, 0xffff}, {0x0, 0xfff1}}, [@qdisc_kind_options=@q_qfg={0x8}]}, 0x2c}}, 0x0)
sendmsg$IPCTNL_MSG_CT_NEW(0xffffffffffffffff, &(0x7f0000000300)={0x0, 0x0, &(0x7f00000000c0)={0x0}}, 0x0)
sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f0000000340)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000380)=@newtfilter={0x84, 0x2c, 0x605, 0x70bd2a, 0x0, {0x0, 0x0, 0x0, r2, {0x0, 0xffe0}, {}, {0x5, 0x2}}, [@filter_kind_options=@f_cgroup={{0xb}, {0x4c, 0x2, [@TCA_CGROUP_ACT={0x48, 0x1, [@m_ct={0x44, 0x1, 0x0, 0x0, {{0x7}, {0x1c, 0x2, 0x0, 0x1, [@TCA_CT_PARMS={0x18, 0x1, {0x10, 0x7ff, 0x6, 0x1, 0xff}}]}, {0x4}, {0xc, 0x7, {0x0, 0x1}}, {0xc, 0x8, {0x0, 0x2}}}}]}]}}, @TCA_RATE={0x6}]}, 0x84}}, 0x20004084)
r3 = socket$netlink(0x10, 0x3, 0x0)
sendmmsg(r3, &(0x7f00000002c0), 0x40000000000009f, 0x0)
sendmsg$netlink(r0, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000000)=[{&(0x7f00000021c0)=ANY=[@ANYBLOB="181600002400e5ff25bd7000fedbdf2505"], 0x1618}], 0x1}, 0x0)
bpf$BPF_PROG_WITH_BTFID_LOAD(0x5, &(0x7f00000000c0)=@bpf_lsm={0xe, 0x4, &(0x7f00000002c0)=ANY=[@ANYBLOB="660a000090000000611169ffff0700ffffff7f009900000095c79d3951dca2a95f0a029db28f7eb0370ea9c886e0033720dcc84baa777727b362c15740ec0c8b3b93322628e57a4ff4b03ea5588417fb774806efb06717a05e839ceaf5c218a0cbccd5806a3a057884463bf1ef2e75e73758d553a8a16972174b95641abdcc97e0a76e748e67df23b8113c6cde2defbf77b901c0025967064c243612de19043db8b90147706c6a56ce53"], &(0x7f0000000080)='GPL\x00', 0x0, 0x29, 0x0, 0x0, 0x70}, 0x94)
ioctl$sock_SIOCDELRT(r0, 0x890c, &(0x7f0000000380)={0x0, @ax25={0x3, @remote={0xcc, 0xcc, 0xcc, 0xcc, 0xcc, 0xcc, 0x0}, 0x7}, @rc={0x1f, @any, 0x4}, @rc={0x1f, @any, 0x6}, 0x4e2, 0x0, 0x0, 0x0, 0x6, &(0x7f0000000040)='bridge_slave_1\x00', 0x6, 0x3, 0x7f})

8.860707332s ago: executing program 1 (id=2942):
socketpair$unix(0x1, 0x1, 0x0, &(0x7f00000029c0)={0xffffffffffffffff, <r0=>0xffffffffffffffff})
openat$tun(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0)
bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x0, 0xc, &(0x7f0000000440)=ANY=[@ANYRES16=r0], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x1c, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94)
r1 = bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="06000000040000000400000004"], 0x48)
close(0x3)
bpf$MAP_CREATE(0x0, &(0x7f0000000180)=ANY=[@ANYBLOB="0b00000005000000000400000900000001"], 0x48)
r2 = bpf$PROG_LOAD(0x5, &(0x7f00000004c0)={0x11, 0x14, &(0x7f0000000200)=ANY=[@ANYBLOB="1802000001000000000000000000000018010000786c6c2500000000070000007b1af8ff00000000bfa100000000000007010000f8ffffffb700000000000000b70300000000ffff850000000400000018110000", @ANYRES32=r1, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000000100000095"], &(0x7f0000000100)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90)
bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000000)={&(0x7f0000000040)='kmem_cache_free\x00', r2}, 0x10)
socketpair$unix(0x1, 0x5, 0x0, &(0x7f00000029c0))
sendmsg$NL80211_CMD_SET_INTERFACE(0xffffffffffffffff, &(0x7f0000000100)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000200)=ANY=[@ANYBLOB="24000000eda482"], 0x24}}, 0x0)
r3 = bpf$MAP_CREATE_TAIL_CALL(0x0, &(0x7f0000000700)={0x3, 0x4, 0x4, 0xa, 0x0, 0x1}, 0x48)
bpf$MAP_LOOKUP_ELEM(0x1, &(0x7f0000000f40)={r3, &(0x7f0000000200), 0x0}, 0x20)
bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x9, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94)
bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x9, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94)
r4 = socket$inet6_udp(0xa, 0x2, 0x0)
setsockopt$inet6_IPV6_FLOWLABEL_MGR(r4, 0x29, 0x20, &(0x7f0000000080)={@private0, 0x8000000, 0x0, 0xff, 0x1}, 0x20)
setsockopt$inet6_IPV6_FLOWLABEL_MGR(r4, 0x29, 0x20, &(0x7f0000000000)={@initdev={0xfe, 0x88, '\x00', 0x0, 0x0}, 0x0, 0x0, 0x2, 0x9}, 0x20)
setsockopt$inet6_IPV6_FLOWLABEL_MGR(r4, 0x29, 0x20, &(0x7f0000000180)={@mcast1, 0x8000400, 0x2, 0x3, 0x9}, 0x20)
openat$tun(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0)
bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000740)={0x0, 0x4, &(0x7f0000000000)=ANY=[@ANYBLOB="1800000000000000000000000000000071127f000000000095"], 0x0, 0x0, 0x0, 0x0, 0x40f00, 0x0, '\x00', 0x0, 0x24, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x9}, 0x94)
r5 = bpf$MAP_CREATE_CONST_STR(0x0, &(0x7f00000000c0), 0x34)
bpf$MAP_LOOKUP_ELEM(0x5, &(0x7f00000000c0)={r5, &(0x7f0000000000), &(0x7f0000000040)=""/73}, 0x70)

8.636337576s ago: executing program 1 (id=2943):
r0 = socket$nl_route(0x10, 0x3, 0x0)
r1 = socket(0x840000000002, 0x3, 0xff)
sendmmsg$inet(r1, &(0x7f0000000b00)=[{{&(0x7f00000001c0)={0x2, 0x0, @remote}, 0x10, &(0x7f0000000080)=[{&(0x7f0000000240)="a905000000007464000100000000000000e5c0", 0x13}, {&(0x7f0000000300)="82d903bfcb8484b98931c6c599ed9cf57c", 0x11}], 0x2}}, {{&(0x7f0000000340)={0x2, 0x4e21, @dev={0xac, 0x14, 0x14, 0x22}}, 0x10, 0x0, 0x0, &(0x7f0000000a00)=ANY=[], 0xc4}}], 0x2, 0x24004044)
r2 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000140)={0x3, 0xc, &(0x7f0000000000)=@framed={{0x18, 0x2, 0x0, 0x0, 0x1}, [@call={0x85, 0x0, 0x0, 0x2e}, @printk={@ld, {}, {}, {}, {}, {0x7, 0x0, 0xb, 0x3, 0x0, 0x0, 0x14e7}}]}, &(0x7f0000000080)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0xfffffffe}, 0x94)
bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f00000002c0)={r2, 0x0, 0xe, 0x0, &(0x7f00000000c0)="e0b9547ed387dbe9abc89b6f5bec", 0x0, 0xe, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4}, 0x50)
sendmsg$nl_route(r0, &(0x7f0000000080)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000100)=ANY=[@ANYBLOB="4800000014000100fcffffff000000000a000000", @ANYRES32, @ANYBLOB="14000100ff020000000000000000000000000001080008000204e0ff13000600"], 0x48}}, 0x0)

8.509735527s ago: executing program 1 (id=2944):
r0 = socket$inet6_sctp(0xa, 0x1, 0x84)
setsockopt$inet_sctp6_SCTP_SOCKOPT_BINDX_ADD(r0, 0x84, 0x64, &(0x7f0000000900)=[@in={0x2, 0x4e23, @remote}, @in6={0xa, 0x0, 0x0, @empty, 0x5ff}], 0x2c)
r1 = socket$inet_sctp(0x2, 0x5, 0x84)
getsockopt$inet_sctp_SCTP_GET_ASSOC_ID_LIST(r1, 0x84, 0x1d, &(0x7f0000000000)={0x1, [<r2=>0x0]}, &(0x7f0000000040)=0x8)
sendmmsg$inet_sctp(r1, &(0x7f0000003640)=[{0x0, 0x0, 0x0, 0x0, &(0x7f00000003c0)=[@sndinfo={0x20, 0x84, 0x2, {0x6, 0x208, 0xff, 0x7}}], 0x20, 0x4c004}], 0x1, 0x8010)
setsockopt$inet_sctp_SCTP_AUTH_KEY(r1, 0x84, 0x17, &(0x7f0000000800)={r2, 0x4, 0x1, 'u'}, 0x9)
setsockopt$inet_sctp6_SCTP_PEER_ADDR_THLDS(r0, 0x84, 0x1f, &(0x7f0000000080)={r2, @in6={{0xa, 0x4e23, 0x97aa, @ipv4={'\x00', '\xff\xff', @multicast2}, 0xfffffff9}}, 0x59, 0x5}, 0x90)
r3 = openat$tun(0xffffffffffffff9c, &(0x7f0000000000), 0x40241, 0x0)
ioctl$TUNSETIFF(r3, 0x400454ca, &(0x7f0000000200)={'syzkaller1\x00', 0xc201})
r4 = socket$kcm(0x2, 0x3, 0x2)
r5 = socket(0x2000000000000021, 0x2, 0x10000000000002)
connect$rxrpc(r5, &(0x7f0000000140)=@in4={0x21, 0x0, 0x2, 0x10, {0x2, 0x8, @multicast2}}, 0x24)
sendmmsg(r5, &(0x7f0000000180)=[{{0x0, 0x0, 0x0, 0x0, &(0x7f00000000c0)=ANY=[@ANYBLOB="18000000000000001001000001"], 0x18, 0xe000}, 0x5}], 0x1, 0x0)
recvmmsg(r5, &(0x7f0000000d00), 0xf000, 0x10002, 0x0)
recvmsg$kcm(r5, &(0x7f0000000300)={0x0, 0x0, 0x0}, 0x12000)
recvmsg$can_bcm(r5, &(0x7f00000002c0)={&(0x7f0000000200)=@pppol2tpv3, 0x80, &(0x7f0000001780)=[{&(0x7f0000001a40)=""/246, 0xf6}, {&(0x7f0000000280)=""/47, 0x2f}, {&(0x7f0000000780)=""/4096, 0x1000}, {&(0x7f0000000500)=""/197, 0xc5}], 0x4, &(0x7f0000001940)=""/215, 0xd7}, 0x40010000)
setsockopt$inet_sctp_SCTP_CONTEXT(r5, 0x84, 0x11, &(0x7f0000000140)={r2, 0x62}, 0x8)
ioctl$SIOCSIFHWADDR(r4, 0x8914, &(0x7f0000000040)={'syzkaller1\x00', @broadcast})
write$tun(r3, &(0x7f0000000240)={@val={0x8, 0x800}, @val={0x7, 0x0, 0x0, 0x300, 0x14, 0x3}, @ipv4=@tcp={{0x5, 0x4, 0x0, 0x3c, 0x3a, 0x0, 0x0, 0x0, 0x2f, 0x0, @remote, @broadcast}, {{0xa200, 0x22eb, 0x41424344, 0x41424344, 0x0, 0x0, 0x5}, {"4adcda08f6e83e2aa00e133f88a8349f246e"}}}}, 0x48)

8.001919769s ago: executing program 1 (id=2951):
r0 = socket$inet6_sctp(0xa, 0x5, 0x84)
bind$inet6(r0, &(0x7f0000000300)={0xa, 0x4e23, 0x0, @empty, 0x5}, 0x1c)
r1 = socket(0x1a, 0x6, 0x2)
setsockopt$netlink_NETLINK_TX_RING(r1, 0x10e, 0xc, &(0x7f0000000180)={0x4, 0x4, 0x5, 0xf84}, 0x10)
setsockopt$bt_rfcomm_RFCOMM_LM(r1, 0x12, 0x3, &(0x7f00000003c0)=0xc, 0x4)
write(r1, &(0x7f0000000000)="240000001a005f0214f9f407000904001f0000000000000000020000080004000a000000", 0x24)
sendto$inet6(r0, &(0x7f0000847fff)='X', 0x34000, 0xe0, &(0x7f000005ffe4)={0xa, 0x4e23, 0x0, @loopback}, 0x1c)
getsockopt$SO_TIMESTAMPING(r1, 0x1, 0x41, &(0x7f0000000400), &(0x7f0000000440)=0x4)
r2 = socket$inet6_udp(0xa, 0x2, 0x0)
r3 = socket$nl_netfilter(0x10, 0x3, 0xc)
sendmsg$NFT_BATCH(r3, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000100)={&(0x7f00000005c0)=ANY=[@ANYBLOB="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"], 0x268}}, 0x0)
setsockopt$inet6_udp_int(r2, 0x11, 0x66, &(0x7f0000000000)=0x456, 0x4)
setsockopt$inet_sctp6_SCTP_PEER_ADDR_PARAMS(r0, 0x84, 0x9, &(0x7f0000000a00)={0x0, @in={{0x2, 0x4e23, @loopback}}, 0x0, 0x8dc, 0x800, 0x0, 0x54, 0x6}, 0x9c)
socketpair(0x1, 0x1, 0x0, &(0x7f0000000000)={<r4=>0xffffffffffffffff, <r5=>0xffffffffffffffff})
r6 = bpf$MAP_CREATE(0x0, &(0x7f00000000c0)=ANY=[@ANYBLOB="12000000020000000400000002"], 0x48)
getsockopt$inet6_tcp_TCP_ZEROCOPY_RECEIVE(r4, 0x6, 0x23, &(0x7f0000000280)={&(0x7f0000ffd000/0x2000)=nil, 0x2000, 0x0, 0x0, 0x0, &(0x7f0000000240)=""/11, 0xb, 0x1, &(0x7f0000000cc0)=""/4096, 0x1000}, &(0x7f0000000380)=0x40)
bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, &(0x7f0000000180)={{r6}, &(0x7f0000000040), &(0x7f0000000140)=r5}, 0x20)
sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f00000007c0)={0x0, 0x0, &(0x7f0000000480)={&(0x7f0000000a00)=@delchain={0x1cc, 0x65, 0x8, 0x70bd27, 0x25dfdbfc, {0x0, 0x0, 0x0, 0x0, {0xe, 0x2}, {0xb, 0xe}, {0x6, 0xc5b377f61037765b}}, [@filter_kind_options=@f_flow={{0x9}, {0x184, 0x2, [@TCA_FLOW_ADDEND={0x8}, @TCA_FLOW_XOR={0x8, 0x7, 0x1ff}, @TCA_FLOW_XOR={0x8, 0x7, 0xfffffff9}, @TCA_FLOW_DIVISOR={0x8, 0x8, 0x7fff}, @TCA_FLOW_MODE={0x8, 0x2, 0x1}, @TCA_FLOW_ACT={0x148, 0x9, 0x0, 0x1, [@m_ct={0xa0, 0x1b, 0x0, 0x0, {{0x7}, {0x1c, 0x2, 0x0, 0x1, [@TCA_CT_MARK={0x8, 0x5, 0x8}, @TCA_CT_ZONE={0x6, 0x4, 0xfffb}, @TCA_CT_NAT_IPV4_MIN={0x8, 0x9, @dev={0xac, 0x14, 0x14, 0x30}}]}, {0x60, 0x6, "effbbfbb9975b98b391b34602a99202c04f8aff0f475c3649e7f9024793790e685860edfb7d78570905ca6acc9165a1fb42c399f209c0f00a8f4866f081cd17e904ddc3210cc30ec49b70f2b1fb3ead1fe143d5356ac58b602d03fa7"}, {0xc, 0x7, {0x1}}, {0xc, 0x8, {0x1, 0x3}}}}, @m_nat={0xa4, 0x2, 0x0, 0x0, {{0x8}, {0x7c, 0x2, 0x0, 0x1, [@TCA_NAT_PARMS={0x28, 0x1, {{0x80000001, 0x7, 0x6, 0x6, 0x4}, @multicast2, @broadcast, 0xffffff00, 0x1}}, @TCA_NAT_PARMS={0x28, 0x1, {{0x8, 0x6, 0x2, 0x5, 0xff}, @remote, @rand_addr=0x64010100, 0xff, 0x1}}, @TCA_NAT_PARMS={0x28, 0x1, {{0x4, 0x5, 0x3, 0x5, 0x5}, @rand_addr=0x64010102, @multicast1, 0xffffff00}}]}, {0x4}, {0xc}, {0xc, 0x8, {0x1, 0x1}}}}]}, @TCA_FLOW_MODE={0x8}, @TCA_FLOW_KEYS={0x8, 0x1, 0x1b0ee}]}}, @TCA_RATE={0x6, 0x5, {0xff, 0x2}}, @TCA_CHAIN={0x8, 0xb, 0x441d}, @TCA_CHAIN={0x8, 0xb, 0x2}]}, 0x1cc}, 0x1, 0x0, 0x0, 0x80}, 0x20000080)
r7 = socket(0x10, 0x803, 0x0)
sendto(r7, &(0x7f0000000740)="120000001200e7ef007b00000000000000a1", 0x12, 0x0, 0x0, 0x0)
sendmsg$TIPC_CMD_SET_NETID(0xffffffffffffffff, &(0x7f0000000440)={0x0, 0x36, &(0x7f0000000400)={&(0x7f00000003c0)={0x24, 0x0, 0x1, 0x70bd28, 0x25dfdbfb, {{}, {}, {0x8, 0x2, 0x8}}}, 0x24}, 0x1, 0x0, 0x0, 0x4001}, 0x0)
recvmmsg(r7, &(0x7f00000037c0)=[{{&(0x7f00000004c0)=@ethernet={0x0, @random}, 0xfdf4, &(0x7f0000000380)=[{&(0x7f0000000140)=""/100, 0x365}, {&(0x7f0000000280)=""/85, 0x7c}, {&(0x7f0000000fc0)=""/4096, 0x197}, {&(0x7f0000000400)=""/106, 0x645}, {&(0x7f0000000980)=""/73, 0x1b}, {&(0x7f0000000200)=""/77, 0x14}, {&(0x7f00000007c0)=""/154, 0x21}, {&(0x7f00000001c0)=""/17, 0x1d8}], 0x21, &(0x7f0000000600)=""/191, 0xffffffffffffff2f, 0xa1}}], 0x4000000000003b4, 0x2040000, &(0x7f0000003700)={0x77359400})
syz_emit_ethernet(0x7a, &(0x7f0000000c00)=ANY=[@ANYBLOB="0180c2000000aaaaaaaaaa0086dd60f53a0400403a00fe800000000000000000000000000011ff02000000000000000000000000000102009078000005006050835900003c01fc000000000000000000000000000001ff0000000000000000000000000000003300000000000000000004000520050000000000704682eb84175588c7df"], 0x0)
r8 = ioctl$TUNGETDEVNETNS(0xffffffffffffffff, 0x54e3, 0x0)
ioctl$NS_GET_USERNS(r8, 0xb701, 0x0)
bpf$PROG_LOAD(0x5, &(0x7f00000002c0)={0x3, 0xff80, &(0x7f0000000000)=@framed={{0x18, 0x8}, [@tail_call={{}, {}, {}, {0x7, 0x0, 0xb, 0x7}}, @printk]}, &(0x7f0000000080)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @sched_cls, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94)
r9 = syz_init_net_socket$bt_sco(0x1f, 0x5, 0x2)
ioctl$sock_ifreq(r9, 0x8910, &(0x7f0000000000)={'veth0_vlan\x00', @ifru_ivalue=0x7})
ioctl$sock_netdev_private(r9, 0x8943, &(0x7f0000000000))

4.245180531s ago: executing program 2 (id=2989):
r0 = socket$igmp(0x2, 0x3, 0x2)
r1 = socket$inet6_tcp(0xa, 0x1, 0x0)
setsockopt$inet6_IPV6_HOPOPTS(r1, 0x29, 0x48, &(0x7f0000000080)={0x2c, 0xc, '\x00', [@pad1, @enc_lim={0x4, 0x1, 0x8}, @generic={0x4, 0x4f, "9650b88176a50d444e84597546014ddf1aa6d8dceab2c18bd281b44e000000745d4f40492050129f92c79e302ed5290691f59a726adf11c809310713777f236acb715dd7a37f7fb49c82a957a474ff"}, @padn={0x1, 0x3, [0x0, 0x0, 0x0]}, @ra={0x5, 0x2, 0x1fc0}]}, 0x68)
setsockopt$MRT_INIT(r0, 0x0, 0xc8, &(0x7f0000000240), 0x4)
ioctl$sock_ipv4_tunnel_SIOCADDTUNNEL(0xffffffffffffffff, 0x89f1, &(0x7f00000000c0)={'gre0\x00', &(0x7f0000000040)={'syztnl1\x00', <r2=>0x0, 0x7800, 0x40, 0x4ede, 0x6, {{0x9, 0x4, 0x3, 0x33, 0x24, 0x65, 0x0, 0x6e, 0x2f, 0x0, @remote, @remote, {[@end, @end, @timestamp_prespec={0x44, 0xc, 0xeb, 0x3, 0x2, [{@rand_addr=0x64010102, 0x3ff}]}]}}}}})
setsockopt$MRT_ADD_VIF(r0, 0x0, 0xca, &(0x7f0000000000)={0x0, 0x1, 0x4b, 0xffffffff, @vifc_lcl_ifindex=r2, @local}, 0x10)

4.030749504s ago: executing program 2 (id=2991):
r0 = socket(0x10, 0x3, 0x0)
r1 = socket$inet_udplite(0x2, 0x2, 0x88)
ioctl$sock_SIOCGIFINDEX(r1, 0x8933, &(0x7f0000000340)={'bridge_slave_0\x00', <r2=>0x0})
socket$nl_generic(0x10, 0x3, 0x10)
sendmsg$nl_route(r0, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000080)=ANY=[@ANYBLOB="700200001300290a000000000000000007000000", @ANYRES32=r2], 0x270}, 0x1, 0x0, 0x0, 0x20008014}, 0x4)
r3 = syz_genetlink_get_family_id$devlink(&(0x7f0000000100), r0)
sendmsg$DEVLINK_CMD_SB_GET(r0, &(0x7f0000000280)={&(0x7f00000000c0)={0x10, 0x0, 0x0, 0x40}, 0xc, &(0x7f00000002c0)={&(0x7f0000000140)={0xcc, r3, 0x100, 0x70bd2a, 0x25dfdbfb, {}, [{@pci={{0x8}, {0x11}}, {0x8}}, {@pci={{0x8}, {0x11}}, {0x8, 0xb, 0x9}}, {@pci={{0x8}, {0x11}}, {0x8, 0xb, 0x5}}, {@pci={{0x8}, {0x11}}, {0x8, 0xb, 0x101}}, {@nsim={{0xe}, {0xf, 0x2, {'netdevsim', 0x0}}}, {0x8, 0xb, 0xfffffffd}}]}, 0xcc}, 0x1, 0x0, 0x0, 0x840}, 0x40)
sendmmsg(r0, &(0x7f0000000000), 0x400000000000235, 0x0)

3.843252332s ago: executing program 2 (id=2995):
bpf$PROG_LOAD(0x5, &(0x7f0000000200)={0x11, 0x15, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94)
sendmsg$NL80211_CMD_NEW_INTERFACE(0xffffffffffffffff, 0x0, 0x0) (async, rerun: 64)
r0 = socket$alg(0x26, 0x5, 0x0) (rerun: 64)
bind$alg(r0, &(0x7f00000004c0)={0x26, 'skcipher\x00', 0x0, 0x0, 'cbc-camellia-aesni\x00'}, 0x58) (async)
setsockopt$ALG_SET_KEY(r0, 0x117, 0x1, &(0x7f0000000280)="ad56b6c5820fae9d6dcd3292ea54c7beef915d564c90c200", 0x18)
r1 = accept4(r0, 0x0, 0x0, 0x800)
sendmmsg$alg(r1, &(0x7f0000000040)=[{0x0, 0x0, &(0x7f0000000000)=[{&(0x7f0000000080)="f78d9ca38fff48f3be52163448412ba8", 0xfffffe3f}, {&(0x7f0000000140)="ebe3a0e9796cfd1647e299f4e376fdba128280b372219d205e81f4a7f71c1926aae1efd7e0054a863f3d5cfe6cb55b5bb9fa6935849e6098ed884e7cb51726b360fbb37b4fe035bbb095873048"}, {&(0x7f00000003c0)="e8700e444d50a969ff67347cff6127e6ef12ee3819271482a4975a52c1ab9b8b4db3945d1032005eabe97b4dc33a47d3a158da988456d30026b433186f53cdcdb93a4722bf306a10470d50f5cb1ece9ead3459bab1cf1538cd0b157653c5e892962c80f158c443e9c6ad7d2a8103ef2f4b93766b9a21501f94c1568b13756b66f74f46cf801704d2da8b96c34070b233af0afcc436712e58ed25e721193af05a045ad3fdc928f02f3dbad19d3e66eebda2e63f3f46ef4511cee26d7b48241847bf9e343ef4674c45e2a085060f11"}], 0x1, &(0x7f0000000380)=[@op={0x18, 0x117, 0x3, 0x1}], 0x18}], 0x1, 0x40800) (async)
recvmsg(r1, &(0x7f00000005c0)={0x0, 0x0, &(0x7f00000001c0)=[{&(0x7f00000000c0)=""/74, 0x7ffff000}, {&(0x7f0000000200)=""/83, 0x200002a7}], 0x1, 0x0, 0x24}, 0x0) (async)
r2 = socket$netlink(0x10, 0x3, 0x15)
sendmsg$DEVLINK_CMD_SB_PORT_POOL_SET(r2, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f00000002c0)=ANY=[@ANYBLOB="040100001000"], 0x104}, 0x1, 0x0, 0x0, 0x20040890}, 0x200080c0) (async)
r3 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000001c0)='cgroup.controllers\x00', 0x275a, 0x0)
r4 = socket$rds(0x15, 0x5, 0x0)
getsockopt$rose(0xffffffffffffffff, 0x104, 0x7, 0x0, 0x0) (async)
bind$rds(r4, &(0x7f0000000040)={0x2, 0x4e21, @local}, 0x10)
sendmsg$rds(r4, &(0x7f00000002c0)={&(0x7f00000000c0)={0x2, 0x0, @initdev={0xac, 0x1e, 0x0, 0x0}}, 0x10, &(0x7f0000000640)}, 0x0) (async, rerun: 32)
socket$inet6_sctp(0xa, 0x5, 0x84) (async, rerun: 32)
socket$inet_smc(0x2b, 0x1, 0x0) (async)
r5 = bpf$MAP_CREATE_RINGBUF(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="1b0000000000000000000000000004"], 0x48) (async, rerun: 64)
r6 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000580), 0xffffffffffffffff) (async, rerun: 64)
r7 = socket$nl_generic(0x10, 0x3, 0x10)
sendmsg$NL80211_CMD_SET_TID_CONFIG(r7, &(0x7f0000000680)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000900)=ANY=[@ANYBLOB='8\x00\x00\x00', @ANYRES16=r6, @ANYBLOB="5953fdfffffffddbdf256b00000008000300", @ANYRES32=0x0, @ANYBLOB="0c0004000285acb4350000fd1cdb330be7eb428934cae754007200000010001d"], 0x38}}, 0x0) (async)
r8 = bpf$PROG_LOAD(0x5, &(0x7f0000000b00)={0x11, 0xf, &(0x7f0000000340)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r5, @ANYBLOB="0000000000000000b702000014000000b7030000000000008500000083000000bf0900000000000055090100000000009500000800000000bf91000000000000b702000043e7b5538500000085000000b70000000000000095"], &(0x7f0000000080)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90)
bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000000c0)={&(0x7f0000000140)='kmem_cache_free\x00', r8}, 0x10) (async)
ppoll(&(0x7f0000000500)=[{r5}], 0x1, 0x0, 0x0, 0x0)
pselect6(0x40, &(0x7f00000001c0)={0x0, 0x0, 0x3, 0xfffffffffffffffd}, 0x0, &(0x7f00000002c0)={0x401, 0x0, 0x0, 0x9, 0x1, 0x0, 0x7fffffff}, 0x0, 0x0) (async, rerun: 32)
setsockopt$RDS_FREE_MR(r4, 0x114, 0x3, &(0x7f0000000000)={{0x3, 0x9}, 0x10}, 0x10) (rerun: 32)
mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x3, 0x8031, 0xffffffffffffffff, 0x0)
close(0x4)
write$cgroup_int(r3, &(0x7f0000000200), 0xffffffc1) (async)
sendmsg$rds(r4, &(0x7f00000004c0)={&(0x7f0000000100)={0x2, 0x4e22, @empty}, 0x10, &(0x7f0000000800)=[{&(0x7f00000003c0)=""/199, 0xc7}, {&(0x7f0000000540)=""/185, 0xb9}, {&(0x7f0000000240)}, {&(0x7f00000013c0)=""/4096, 0x1000}, {&(0x7f0000000600)=""/216, 0xd8}, {&(0x7f0000000700)=""/254, 0xfe}], 0x6, &(0x7f0000000880)=[@zcopy_cookie={0x18, 0x114, 0xc, 0x3ff}, @mask_cswp={0x58, 0x114, 0x9, {{0x4, 0xffffffff}, &(0x7f0000000280)=0xfffffffffffffff7, &(0x7f0000000300)=0x3b7caa38, 0xf8, 0xfffffffffffffffa, 0x9, 0xffffffffffffff0c, 0x40, 0xfffffffffffff800}}], 0x70, 0x4004800}, 0x4000844)

3.631909074s ago: executing program 2 (id=2996):
bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="04000000040000000400000005"], 0x48)
r0 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94)
r1 = bpf$MAP_CREATE(0x0, &(0x7f0000000340)=ANY=[@ANYBLOB="0e000000040000000400000009"], 0x50)
bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x0, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r1, @ANYBLOB="0000000000000000b70800000d0000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000000100000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90)
bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000040)={&(0x7f0000000180)='percpu_create_chunk\x00', r0}, 0x18)
r2 = bpf$PROG_LOAD(0x5, &(0x7f00000002c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000280)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x29, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94)
bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000040)={&(0x7f0000000080)='percpu_create_chunk\x00', r2}, 0x18)
bpf$MAP_CREATE(0x0, &(0x7f0000000700)=ANY=[@ANYBLOB="0a00000001010000ff7f0000cc"], 0x50)
r3 = bpf$MAP_CREATE(0x0, &(0x7f0000000100)=@base={0x8, 0x4, 0x4, 0x9}, 0x50)
bpf$PROG_LOAD(0x5, &(0x7f0000000000)={0xa, 0x8, &(0x7f0000000240)=ANY=[@ANYBLOB="1809000000000000000000000000000018120000", @ANYRES32=r3, @ANYBLOB="0000000000000000b7030000070000008500000021000000b70000000000000095"], &(0x7f0000000640)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90)

3.432276953s ago: executing program 4 (id=2998):
r0 = socket$nl_xfrm(0x10, 0x3, 0x6)
sendmsg$nl_xfrm(r0, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000940)=@newsa={0x184, 0x10, 0x1, 0x0, 0x0, {{@in6=@private1, @in=@dev={0xac, 0x14, 0x14, 0x31}, 0x4e21}, {@in=@broadcast, 0x0, 0x32}, @in6=@private1, {0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff}, {}, {0x0, 0xfffffffc}, 0x0, 0x0, 0x2, 0x0, 0x0, 0x42}, [@algo_crypt={0x48, 0x2, {{'cbc(aes)\x00'}}}, @algo_auth_trunc={0x4c, 0x14, {{'cmac(aes)\x00'}}}]}, 0x184}, 0x1, 0x200000000000000}, 0x4004)

3.292549679s ago: executing program 0 (id=3000):
r0 = socket(0x2, 0x80805, 0x0)
r1 = socket$inet6_sctp(0xa, 0x5, 0x84)
unshare(0x6020480)
socket(0x1d, 0x2, 0x6) (async)
r2 = socket(0x1d, 0x2, 0x6)
getsockopt$inet_sctp_SCTP_SOCKOPT_CONNECTX3(r2, 0x6a, 0x3, 0x0, &(0x7f0000000080))
shutdown(r1, 0x0)
setsockopt$bt_BT_DEFER_SETUP(r0, 0x112, 0x7, &(0x7f0000000000), 0x4)
close(0x3)
getsockopt$inet_sctp6_SCTP_SOCKOPT_CONNECTX3(r1, 0x84, 0x6f, &(0x7f0000000200)={0x0, 0x10, &(0x7f00000001c0)=[@in={0x2, 0x4e23, @rand_addr=0x64010100}]}, &(0x7f0000000140)=0x10) (async)
getsockopt$inet_sctp6_SCTP_SOCKOPT_CONNECTX3(r1, 0x84, 0x6f, &(0x7f0000000200)={<r3=>0x0, 0x10, &(0x7f00000001c0)=[@in={0x2, 0x4e23, @rand_addr=0x64010100}]}, &(0x7f0000000140)=0x10)
getsockopt$inet_sctp6_SCTP_PRIMARY_ADDR(r1, 0x84, 0x7a, &(0x7f0000000340)={r3, @in6={{0xa, 0x3, 0x4, @mcast1}}}, &(0x7f0000000040)=0x84)
setsockopt$inet_sctp_SCTP_MAX_BURST(r0, 0x84, 0x14, &(0x7f0000000180)=@int=0x5, 0x4) (async)
setsockopt$inet_sctp_SCTP_MAX_BURST(r0, 0x84, 0x14, &(0x7f0000000180)=@int=0x5, 0x4)

3.254611852s ago: executing program 2 (id=3001):
r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000240), 0x0, 0x0)
ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f0000000040)={'wlan1\x00', 0x7101})
r1 = socket(0x400000000010, 0x3, 0x0)
socket$nl_route(0x10, 0x3, 0x0)
r2 = socket$unix(0x1, 0x1, 0x0)
ioctl$sock_SIOCGIFINDEX(r2, 0x8933, &(0x7f0000000100)={'syzkaller0\x00', <r3=>0x0})
socket$inet_icmp_raw(0x2, 0x3, 0x1)
syz_init_net_socket$bt_hci(0x1f, 0x3, 0x5)
close(0x4)
syz_open_procfs$namespace(0x0, &(0x7f0000000200)='ns/pid_for_children\x00')
unshare(0x6a040000)
r4 = socket$nl_route(0x10, 0x3, 0x0)
r5 = socket$netlink(0x10, 0x3, 0x0)
socketpair(0x1, 0x100000005, 0x0, &(0x7f0000000000)={<r6=>0xffffffffffffffff})
getpeername$packet(r6, &(0x7f0000000000)={0x11, 0x0, <r7=>0x0, 0x1, 0x0, 0x6, @dev}, &(0x7f0000000040)=0x14)
r8 = socket$kcm(0x10, 0x2, 0x0)
sendmsg$kcm(r8, &(0x7f0000000000)={0x0, 0x0, &(0x7f00000004c0)=[{&(0x7f0000000140)="d8000000180081054e81f783db4cb9040a1d080006007c09e8fc55a10a0015000600142603600e1208000f00fff00401a80008000800104004080000055c0461c1d67f6f94007134cf6efb8000a007a290457f0189b316277ce06bbace8017cbec4c2ee5a7cef4090000001fb71b14d6d930dfe144ecc44121d9d322fe7c008775730d16a4683f5aeb4edbb57a5025ccca9e00360db798262f3940fad9e3bb9ad809d5e1cace81ed0bffece0b42a9ecbee5de6ccd4e1ffffffffc1c9b6278754ca397c388b0dd6e4edef3d9300fc0d150000000000000000", 0xd8}], 0x1}, 0x4000000)
sendmsg$nl_route(r5, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000001140)={&(0x7f00000002c0)=ANY=[@ANYBLOB="5000000010000305fcffffff0000000000000000", @ANYRES32=0x0, @ANYBLOB="1133020031880000280012800b000100096d61637365630000180002800c0004000300000100c28000080005000300000008000500", @ANYRES32=r7, @ANYBLOB], 0x50}, 0x1, 0x0, 0x0, 0x48890}, 0x0)
splice(r5, 0x0, r4, 0x0, 0x615a, 0x3)
r9 = bpf$MAP_CREATE(0x0, 0x0, 0x50)
bpf$BPF_MAP_LOOKUP_AND_DELETE_ELEM(0x15, &(0x7f0000000100)={r9, &(0x7f0000000040), 0x0}, 0x20)
sendmsg$nl_route(r4, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000080)=ANY=[], 0x28}}, 0x0)
sendmsg$nl_route_sched(r1, &(0x7f0000000bc0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f00000005c0)=@newqdisc={0x38, 0x24, 0x4ee4e6a52ff56541, 0x70bd2a, 0xffffffff, {0x0, 0x0, 0x0, r3, {0x0, 0xfff1}, {0xffff, 0xffff}, {0x0, 0x2}}, [@qdisc_kind_options=@q_multiq={{0xb}, {0x8, 0x2, {0x0, 0x3}}}]}, 0x38}}, 0x0)
r10 = socket$nl_generic(0x10, 0x3, 0x10)
r11 = syz_genetlink_get_family_id$ethtool(&(0x7f0000000080), 0xffffffffffffffff)
sendmsg$ETHTOOL_MSG_FEATURES_SET(r10, &(0x7f0000002540)={0x0, 0x0, &(0x7f0000002500)={&(0x7f0000000340)=ANY=[@ANYBLOB='8\x00\x00\x00', @ANYRES16=r11, @ANYBLOB="f83c12d686eb4909010000000000000000000c0000000c00038004000380040005001800018014004200766574683000"/58], 0x38}}, 0x0)
r12 = socket$inet_mptcp(0x2, 0x1, 0x106)
setsockopt$inet_int(r12, 0x0, 0x18, &(0x7f0000000080)=0x5, 0x4)
bind$inet(r12, &(0x7f0000000100)={0x2, 0x0, @dev={0xac, 0x14, 0x14, 0x42}}, 0x10)
sendmsg$nl_route_sched(r1, &(0x7f0000000580)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000004400)=@newtfilter={0x8b0, 0x2c, 0xd27, 0x30bd29, 0x25dfdc00, {0x0, 0x0, 0x0, r3, {0x0, 0x4}, {}, {0x8}}, [@filter_kind_options=@f_matchall={{0xd}, {0x87c, 0x2, [@TCA_MATCHALL_ACT={0x878, 0x2, [@m_police={0x874, 0x1, 0x0, 0x0, {{0xb}, {0x848, 0x2, 0x0, 0x1, [[@TCA_POLICE_RATE={0x404, 0x2, [0x1ff, 0x3, 0x10000, 0x81, 0x7f, 0xfffffffb, 0x4, 0x2, 0xffffffc0, 0x5, 0x2234, 0x7f, 0x81b, 0x800, 0x8, 0x0, 0x3, 0x7ed53619, 0x1, 0x2, 0x9644, 0x4, 0x58b, 0x85a, 0x3ff, 0x46, 0x2, 0x1, 0x0, 0x80000000, 0x10001, 0x790, 0x5, 0xab2, 0xfffffff9, 0x1a77, 0x9, 0x3, 0x400, 0x63c, 0x4, 0xffffffff, 0x1, 0x5, 0x1, 0x5b1f, 0x7b0, 0x7, 0x100, 0x6, 0xd, 0xff, 0x3, 0x10000, 0x6, 0x6b7, 0x1ff, 0x80, 0x4, 0x7, 0x3, 0xa14, 0x3, 0x2, 0x80000000, 0x81, 0x7, 0x8, 0x5, 0x10001, 0xf3, 0x3, 0xfffffff9, 0x9, 0x4, 0x8, 0xfff, 0x3, 0x1, 0x6, 0x7, 0x0, 0x100, 0xc0000000, 0x6, 0x6, 0x6, 0x8, 0x80000001, 0x8, 0x1d24, 0x2, 0x9, 0x0, 0x7f, 0x7, 0x63c, 0xff, 0x24, 0x5, 0x7, 0x6, 0x7a, 0x8, 0x0, 0x7, 0x470, 0x7f, 0x6, 0x0, 0x1, 0x0, 0x4, 0x9, 0x61, 0x200, 0x6, 0x2, 0x2, 0x800, 0x10001, 0x8, 0x7, 0xf, 0xda56, 0x80000000, 0x80, 0x2f0cb955, 0x7, 0xfed, 0xf, 0x6ae, 0x2, 0x1, 0x4009, 0x8001, 0x0, 0xec000, 0xfffffffe, 0x1, 0x2, 0xfffffffb, 0x7, 0x8, 0x4, 0x1, 0xffffcf1b, 0x282, 0x5517bc7b, 0x3, 0x4, 0xb6b, 0x5, 0x0, 0xac, 0x9, 0x6, 0x10, 0x9, 0x8, 0x7ffffffd, 0x0, 0x74, 0x2, 0x7fffffff, 0x0, 0xa, 0x6, 0xffffffff, 0x8, 0x2, 0x9, 0x7f, 0x5, 0x3, 0xa, 0x1, 0x0, 0x9, 0x300, 0x5, 0x3, 0x6, 0xffffffff, 0xffb, 0xff, 0x5, 0x8, 0x3, 0xfff, 0x5, 0xfca, 0x399d, 0x6, 0x8ab6, 0x18000, 0x2, 0xfffffff9, 0x2, 0x2, 0x528c, 0x5, 0x200, 0xac, 0xf, 0xd05, 0x9a2ce73, 0x4, 0x6, 0xe074, 0x6b10, 0x5, 0x1, 0x6, 0xb, 0xa26, 0xaf6, 0x0, 0xec, 0x8, 0xde16, 0xc418, 0xffffffff, 0xffffffff, 0x9, 0x400, 0x1, 0x5, 0x354d, 0x5, 0x2, 0x1, 0x7, 0x1, 0x177, 0x7, 0x3, 0x80, 0x5, 0x8, 0xfffffffb, 0x9, 0xe7b, 0x0, 0x7, 0x42bf, 0x10000, 0x9, 0x9, 0x6, 0x4b75, 0x80000001, 0x1000, 0x5915, 0x10001, 0x1]}], [@TCA_POLICE_PEAKRATE={0x404, 0x3, [0x1000, 0x4, 0xec2, 0x6, 0x8, 0x400, 0x5, 0x1, 0x7, 0x470, 0x487, 0x100, 0xa99, 0xffffff01, 0x5, 0x37f, 0x8, 0x6, 0x3, 0x3, 0x800, 0xd2f5, 0x40, 0x4, 0x4, 0x5, 0x7, 0xe, 0x2, 0x8, 0x101, 0xffffffff, 0x2, 0x10000, 0xa6, 0x3, 0x10000, 0x5, 0x4, 0x0, 0x3, 0x0, 0xd, 0x8000, 0x98, 0x8, 0x6, 0x9, 0x1000, 0xb3000, 0xf, 0x3, 0x9, 0xb4, 0x94d, 0x9, 0x8, 0x4, 0x100, 0xec0, 0xffff, 0x4, 0x2, 0x3ff, 0x3e, 0xb828, 0x0, 0x0, 0x365, 0x8, 0x8, 0xf, 0x1, 0xfffffffe, 0xfffffff6, 0x93, 0x7ff, 0x92, 0x0, 0x7, 0xfffffffc, 0x7ff, 0x9, 0x2, 0x0, 0xfffffff7, 0x8, 0x4, 0x3, 0x9, 0xc, 0x0, 0x3, 0x1, 0x400, 0x100000, 0x7f, 0x2, 0x8, 0x4, 0x6, 0x4, 0x7, 0xfffffffa, 0x101, 0xadd9, 0x1, 0x0, 0x7, 0x7fffffff, 0x2, 0x4, 0x0, 0x5, 0x4, 0x3, 0x8, 0x5, 0x6, 0x6, 0xe, 0xb, 0x3, 0x7f, 0xffff, 0x401, 0x1685, 0xa252, 0x2, 0x200, 0x3, 0x1, 0x400, 0xfffffffc, 0xfffffffc, 0x1000, 0x7ff, 0x1, 0x1f6, 0x751, 0x7, 0x40000000, 0x4, 0xffffdbb7, 0x50, 0xf, 0xf, 0xe, 0x3, 0x0, 0x81, 0xfff80000, 0x7a7, 0x1, 0x6, 0x3, 0x8, 0x7, 0x5, 0x2, 0x0, 0x4e8, 0x80, 0x3, 0x8, 0x5, 0x0, 0x5, 0x7fff, 0x7, 0x8, 0x6a4941c5, 0x2ea567b4, 0x8, 0x80000000, 0x6, 0x40, 0x2, 0xfff, 0x8, 0x3, 0x1, 0x1, 0x0, 0x0, 0xd3bed341, 0x691f, 0x0, 0x2, 0x9, 0x6, 0x0, 0x1ff, 0x3, 0x3, 0x6, 0x5fc8462f, 0x0, 0x7, 0xffff, 0xfffffffc, 0x5, 0x0, 0xb9a6, 0x522, 0x2, 0x2, 0x900, 0x8, 0xbb99, 0xb8000000, 0x8, 0x3, 0xc0a1, 0x5, 0x8, 0x7, 0x59, 0x9, 0x2, 0x101, 0x5f502dc7, 0x7, 0x0, 0x4, 0x6, 0x80000001, 0x3, 0xffffff97, 0x2, 0xfff, 0x1, 0x40, 0x8, 0x3, 0x710, 0x8, 0x1, 0xfffff339, 0x3, 0x8001, 0x1, 0x8001, 0x9, 0x8, 0xfffffffa, 0x8, 0x9, 0x3, 0xe, 0x10000, 0x9, 0x9, 0x7, 0xfffffff8]}, @TCA_POLICE_TBF={0x3c, 0x1, {0xfffffe00, 0x5, 0x5, 0x1, 0xdbec, {0x8, 0x0, 0xb55, 0x5, 0x7, 0x5}, {0x6, 0x0, 0xd, 0x5, 0x1, 0x5d17}, 0x2, 0x0, 0x6}}]]}, {0x4}, {0xc}, {0xc, 0x8, {0x0, 0x3}}}}]}]}}]}, 0x8b0}, 0x1, 0x0, 0x0, 0x10}, 0x0)

3.188199623s ago: executing program 4 (id=3002):
r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000100), 0xc1842, 0x0)
r1 = openat$tun(0xffffffffffffff9c, &(0x7f0000000240), 0x0, 0x0)
ioctl$TUNSETIFF(r1, 0x400454ca, &(0x7f0000000040)={'syzkaller0\x00', 0x7101})
ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f0000000040)={'syzkaller0\x00', 0x7101})
r2 = openat$tun(0xffffffffffffff9c, &(0x7f0000000080), 0x0, 0x0)
close(r2)
socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000140))
ioctl$SIOCSIFHWADDR(r2, 0x8914, &(0x7f0000002280)={'syzkaller0\x00', @link_local})
r3 = bpf$MAP_CREATE(0x0, &(0x7f0000000000)=@base={0x10, 0x4, 0x4, 0x2, 0x0, 0x1}, 0x48)
bpf$MAP_GET_NEXT_KEY(0x3, &(0x7f00000001c0)={r3, &(0x7f0000000240), 0x0}, 0x20)
write$cgroup_devices(r0, &(0x7f0000000840)=ANY=[@ANYBLOB="1e0308004d6b71ef288563"], 0xffdd)
close(0x3)
r4 = socket$can_raw(0x1d, 0x3, 0x1)
ioctl$sock_SIOCGIFINDEX(r4, 0x8933, 0x0)
close(0x4)

3.002415869s ago: executing program 0 (id=3003):
mmap(&(0x7f0000000000/0x3000)=nil, 0x3000, 0x3000008, 0x40010, 0xffffffffffffffff, 0x8528f000)
r0 = accept$ax25(0xffffffffffffffff, &(0x7f0000000000)={{}, [@remote, @null, @netrom, @bcast, @default, @remote, @null, @default]}, &(0x7f00000000c0)=0x48)
accept4$ax25(r0, &(0x7f0000000100)={{0x3, @bcast}, [@netrom, @rose, @default, @remote, @default, @remote, @null, @bcast]}, &(0x7f0000000180)=0x48, 0xc0000)
bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f00000002c0)={0x18, 0xf, &(0x7f00000004c0)=@ringbuf={{0x18, 0x0, 0x0, 0x0, 0x8f, 0x0, 0x0, 0x0, 0x5e7}, {{}, {}, {0x7, 0x0, 0xb, 0x3, 0x0, 0x0, 0xfffc}, {0x85, 0x0, 0x0, 0x86}}, {{0x5, 0x0, 0x5, 0x9, 0x0, 0x1, 0x480}}, [], {{}, {0x7, 0x0, 0xb, 0x2, 0x0, 0x0, 0x3}, {0x85, 0x0, 0x0, 0x2a}}}, &(0x7f0000000080)='GPL\x00', 0x7, 0x1009, &(0x7f0000001cc0)=""/4105, 0x41100, 0x62}, 0x94)

2.837759761s ago: executing program 0 (id=3004):
r0 = socket$nl_netfilter(0x10, 0x3, 0xc)
sendmsg$NFT_BATCH(r0, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000100)=ANY=[@ANYBLOB="140000001000010000000000000000000100000a20000000000a01080000000000000000010000000900010073070030000000002c00000003ae004931e459f0ef360a01030000000000000000010000000900010073797a01cfb956657240ad0d83742eea2bbdd630000000000900030073797a30000000007c000000060a010400000000000000000100000008000b400000000054000480340001800b000100657874686472000024000280080001400000000c0800034000000000080004400000003005000200070000001c0001800a00010072656469720000000c00028008dd2ee7fe948b362097b40001400000000c090001007379"], 0xf0}}, 0x0)
bpf$PROG_LOAD(0x5, &(0x7f00000006c0)={0x6, 0xe, &(0x7f00000008c0)=ANY=[@ANYBLOB="b7020000000b0000bfa30000000000000703000000feffff7a0af0fff8ffff1991a4f0ff00000000b7060000080000006f6400000000000045040400010000001704000001000a00b7040000ff0100006a0af2fe0000000085000000be000000b70000000000000095000000000000009e17f199a68b06d83298a8cdc21ce784909b849d5550ad857d0454d8877a6d6c1d69f2ffcaa10350e11cb97c8adf1bc9a0c4ceceb9971e43405d621ffbc9ce000000d8ca56b50d0c010d631f6dde53a9a53608c10556b84049761451ce540c772e2d9f8004e26f7fcc059c062234d5595f6fbaa187b81d1106000029a9d542ca9d85a5c9c88474895d679838def0a83a733dc6a39b63a5ed69d32394c53361d7e43c5cbd80450f859ce8122a79c3e40000b59b0fc46d6cec3c0802882add4e3179bd4a44f231b6d753a7be428ba953df4aece69311687f4122073a236c3a32efa04137d4524847d2638da3261c8162bb7c7824be6195a66d2e17e122040e1100000000928612a29fc691e4f1f7bd053abb885f39381f1759410b1059f05684261f332d606834669b49ec99320ca7712d7e05005bf5ed818ecc7640917f6a559a47db608fcf9f6c131b84e41c354c66838f72b9e12d36e996f316f0812ca83efb30c7f6c6d57c4a64590401eec22523dd712c680013e87f649a1ede7142ca9d5d8a8c9f9b440fe4331ad5532c74d9a31a5d737537f7a2caa30581253d14dd3e92af7dc836686365ae20bdec561c0402b67801267a8df97d2f85426a5963d4fa3e26cc05972c162f223f000000d999e80de00fcbcc02d0aed7bb8f7ba337d59c14f39dcd4aad4139ef6425a9367f1bd1467fc6b95a4df7669839771ce9d5788029901e5a79d8b9990ace8f74087f25ad50c4608800"/675], &(0x7f0000000080)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @xdp, 0xffffffffffffffff, 0x8, &(0x7f0000000000), 0x3a, 0x10, &(0x7f0000000340), 0xfffffe94, 0x0, 0xffffffffffffffff, 0xffffffffffffff5b}, 0x42)

2.632220058s ago: executing program 0 (id=3005):
r0 = socket(0x2a, 0x2, 0x0)
sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f0000000300)={0x0, 0x0, &(0x7f0000000240)={&(0x7f00000005c0)=@newqdisc={0x24}, 0x24}}, 0x0)
r1 = socket$inet6(0xa, 0x805, 0x0)
getsockopt$inet_sctp6_SCTP_SOCKOPT_CONNECTX3(r1, 0x84, 0x6f, &(0x7f0000000080)={0x0, 0x10, &(0x7f0000000000)=[@in={0x2, 0x4620, @private=0xa010101}]}, &(0x7f00000002c0)=0x10)
getsockopt$bt_hci(r1, 0x84, 0x85, &(0x7f0000000080)=""/4060, &(0x7f00000010c0)=0xfdc)
getsockname$packet(r0, &(0x7f0000000700)={0x11, 0x0, <r2=>0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000500)=0x14)
r3 = bpf$MAP_CREATE(0x100000000000000, &(0x7f00000001c0)=ANY=[@ANYBLOB="0a0000000c000000b30000007f"], 0x50)
bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000440)={0x11, 0x12, &(0x7f0000000080)=@framed={{0x18, 0x8, 0x0, 0x0, 0xb0, 0x0, 0x0, 0x0, 0x40004}, [@func={0x85, 0x0, 0x1, 0x0, 0x6}, @map_fd={0x18, 0x0, 0x1, 0x0, r3}, @generic={0x66, 0x0, 0x7, 0x0, 0x1001}, @initr0={0x18, 0x0, 0x0, 0x0, 0xfffffff8, 0x0, 0x0, 0x0, 0xffffffff}, @exit, @printk={@x, {0x3, 0x3, 0x6}, {}, {}, {}, {0x5, 0x0, 0xb, 0xa}}]}, &(0x7f0000000000)='GPL\x00', 0xa}, 0x94)
sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000280)={&(0x7f0000000540)=@newqdisc={0x2c, 0x24, 0xf0b, 0x0, 0x0, {0x0, 0x0, 0x0, r2, {}, {0xffff, 0xffff}, {0xe}}, [@qdisc_kind_options=@q_drr={0x8}]}, 0x2c}}, 0x0)
sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f0000000340)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000740)=@newtfilter={0x888, 0x2c, 0xd2f, 0x0, 0x0, {0x0, 0x0, 0x0, r2, {0x0, 0xfff1}, {}, {0x2}}, [@TCA_RATE={0x6, 0x5, {0x0, 0x2}}, @filter_kind_options=@f_fw={{0x7}, {0x854, 0x2, [@TCA_FW_POLICE={0x850, 0x2, [@TCA_POLICE_TBF={0x3c, 0x1, {0x0, 0x6, 0x3ff, 0x5, 0xfffffffd, {0x8, 0x1, 0x2, 0xf801, 0xa6d, 0x12b}, {0x5, 0x0, 0x4, 0x3701, 0xcc42, 0x7}, 0x0, 0x2, 0x6}}, @TCA_POLICE_AVRATE={0x8, 0x4, 0x5}, @TCA_POLICE_PEAKRATE={0x404, 0x3, [0x401, 0xe, 0x80000001, 0x8, 0x200, 0x6, 0x8, 0x4, 0x10200000, 0x4, 0x3, 0x9, 0x3, 0xffffffff, 0xb, 0x9, 0x4, 0xd4ae, 0x5, 0x300000, 0xe1b5, 0xc5b, 0x6, 0x4, 0x9, 0x6, 0x9, 0x8, 0x3, 0x9, 0xd, 0x7f, 0x7, 0xce0, 0x1ff, 0x6, 0x6, 0x41, 0xff, 0x800, 0xfff, 0x7, 0x9, 0xd, 0x4, 0xffffff1f, 0xa, 0xc, 0x8, 0xfffffffa, 0x155, 0x7, 0x0, 0x18000, 0xc, 0x9, 0x40000, 0x101, 0x6, 0x3ff, 0x1, 0x3, 0x7554, 0x2, 0x4, 0x1, 0x4, 0xd, 0x8000, 0xff, 0x0, 0xeac2, 0x87, 0x3, 0xfe000000, 0x3, 0x8001, 0xff, 0xffff1cac, 0x2892, 0x6, 0x8c5e, 0x1, 0x5, 0xffffffff, 0x80, 0xffffffac, 0x3, 0xff1, 0x2, 0x2, 0x8, 0x2, 0x1, 0x8, 0x8, 0xfff, 0x80000001, 0x9, 0x8, 0x0, 0x8, 0x487, 0x6, 0x8, 0x1000, 0x1ff800, 0x6, 0xfffffffe, 0x3c78, 0xfa1, 0x3, 0x6, 0x9, 0xffffffff, 0x80000002, 0x2, 0xda, 0x9, 0x401, 0x6, 0x7, 0x2, 0x2, 0xe, 0x835, 0x4, 0x3, 0x6cc7, 0x6, 0x8, 0x8, 0x400, 0x8, 0x4, 0x3, 0x5, 0x5, 0x0, 0x9, 0x400, 0x3, 0x0, 0x4cc, 0xb, 0x0, 0xce, 0x6, 0x0, 0xc8, 0x4, 0x5, 0x4, 0x1ff, 0x1ff, 0x968, 0x5, 0x68cff086, 0x2, 0xfff, 0x2, 0x7ff, 0x1000, 0x80000001, 0x9, 0x9, 0x0, 0x8001, 0x1000, 0x8b7f, 0xfe, 0xc, 0x8, 0x7, 0x8000000, 0x0, 0x7fff, 0xfffffffd, 0x5, 0x815d, 0x5, 0x44, 0x4, 0x6, 0x3, 0x1, 0x8, 0x0, 0x7ff, 0x3, 0x8, 0x1, 0x2, 0x800, 0x7, 0x5, 0x10, 0xfffffff7, 0x8, 0x40, 0x1, 0x10001, 0x1000, 0xe42c, 0x1, 0x101, 0x6, 0x8, 0x4, 0x9a14, 0x4, 0x81, 0x7, 0x0, 0x8, 0x8, 0xfffffffa, 0x0, 0x30000, 0x7ff, 0x4, 0x3, 0xd, 0x5, 0x0, 0xfff, 0x3, 0x7b0, 0x7, 0x9, 0xffff, 0x5, 0xff, 0x4, 0x0, 0x4, 0x9, 0x6, 0x100, 0x81, 0x0, 0x7fc, 0x2, 0x5, 0x80, 0x2, 0xe, 0x1, 0x40, 0x1ff, 0x3, 0x380, 0x6, 0x7, 0x8, 0xfffffffb]}, @TCA_POLICE_RATE={0x404, 0x2, [0x4, 0x7, 0x8, 0x7, 0xffff, 0x2, 0x3, 0x7fff, 0x8, 0x0, 0x401, 0x4, 0x0, 0xf7b1, 0xa, 0x40, 0x200, 0x0, 0x1, 0x9, 0x9, 0x8, 0xbf2, 0x2, 0xffff9374, 0x9, 0x1, 0x5, 0x3ff, 0x3, 0x6, 0x5, 0x2, 0x7, 0xe, 0x5, 0x4, 0x9, 0x8, 0xf0, 0x5, 0x8000, 0x0, 0x7, 0xff, 0x2, 0x2, 0x400, 0x0, 0x5, 0x2, 0x401, 0x100, 0xf30, 0x8001, 0x9, 0x370, 0x3, 0x1, 0xfffffff9, 0x9, 0x3, 0x5, 0xb9b, 0x1, 0x5, 0x0, 0x4, 0x7, 0x6, 0x3ff, 0x3, 0x7, 0x76, 0x9, 0xffff, 0x8, 0xd, 0x80, 0x4, 0x9, 0x7ff, 0x80000001, 0x9, 0x6, 0x7f, 0x9, 0x7ff, 0x3, 0x8, 0x31, 0x1, 0x2d, 0x0, 0xf02, 0x15200, 0xa, 0x1, 0xe148, 0x7, 0x1, 0x3, 0x6, 0x6, 0xb, 0xfffffffa, 0x4, 0xdf, 0x80000000, 0x8001, 0x2, 0x3, 0x2971010e, 0x3b655406, 0x1, 0x8, 0x6, 0x6, 0x4, 0x4, 0x8, 0x80000001, 0x5dd, 0x2d3, 0x7, 0x8, 0x5, 0x79d5, 0x2, 0x800, 0x8d, 0x1, 0x2, 0x1, 0x5, 0x6, 0x338, 0x6, 0x2, 0x4, 0x1, 0x3, 0x0, 0x0, 0x8, 0x1, 0x3ff, 0x8, 0x56, 0x7, 0x401, 0x7, 0x0, 0x0, 0x0, 0xda, 0x5, 0x42, 0x18, 0xfffffff7, 0x5, 0xed2, 0x7, 0x211, 0x0, 0x2, 0xc9, 0x3, 0x8, 0x1, 0x9, 0x58, 0x8, 0x5e5, 0x5, 0x3, 0xfffffffb, 0x3, 0xff, 0x6, 0x10, 0xf7ee907a, 0xff, 0xc9, 0x9, 0x0, 0x400, 0x0, 0x7, 0x6, 0x9, 0x8, 0x8, 0x0, 0x0, 0x7, 0x0, 0x4, 0x7, 0x2, 0x3, 0x9, 0x9, 0x0, 0x7, 0x4, 0x0, 0x4, 0x4, 0x4, 0x6f3, 0x6, 0x10, 0x0, 0x7, 0xfffffff9, 0xfffffffa, 0x9, 0x53a, 0x8, 0x1, 0x4, 0xb, 0x8, 0xfffffff9, 0x400, 0x461, 0x81, 0x8, 0x2, 0x7ff, 0x2, 0x8000, 0x7, 0x4, 0xba95, 0x4, 0x4706, 0x7ff, 0x4, 0xffffffff, 0xf7b1, 0x3, 0x2, 0x5, 0x9, 0x1fffc, 0x80000000, 0x8001, 0x9, 0x4, 0x9, 0x3, 0x6, 0xce, 0x8]}]}]}}]}, 0x888}, 0x1, 0x0, 0x0, 0x20000005}, 0x40)
r4 = socket$netlink(0x10, 0x3, 0x0)
sendmmsg(r4, &(0x7f00000002c0), 0x40000000000009f, 0x0)

947.804751ms ago: executing program 3 (id=3008):
bpf$BPF_BTF_GET_FD_BY_ID(0x13, &(0x7f0000000080)=0xffffffffffffffff, 0x4)
r0 = bpf$BPF_BTF_LOAD(0x12, &(0x7f0000000400)={&(0x7f00000002c0)={{0xeb9f, 0x1, 0x0, 0x18, 0x0, 0x100, 0x100, 0xa, [@var={0xb, 0x0, 0x0, 0xe, 0x1, 0x3}, @type_tag={0x5, 0x0, 0x0, 0x12, 0x3}, @enum64={0x6, 0xa, 0x0, 0x13, 0x1, 0x2, [{0xb, 0x81, 0x6}, {0x10, 0x7, 0x5}, {0x3, 0x1a, 0x6}, {0x5, 0x1, 0x4}, {0x9, 0x6, 0xe6}, {0x5, 0x4, 0x5}, {0xc, 0x10000, 0x8}, {0x2, 0x2, 0x10000}, {0xf, 0x0, 0xa}, {0x3, 0x9, 0x87a}]}, @func_proto={0x0, 0x9, 0x0, 0xd, 0x0, [{0x4, 0x4}, {0x2, 0x4}, {0x10}, {0x1, 0x4}, {0x3, 0x3}, {0x2, 0x2}, {0x7, 0x2}, {0xd}, {0xd, 0x3}]}, @restrict={0x7, 0x0, 0x0, 0xb, 0x3}]}, {0x0, [0x2e, 0x61, 0x61, 0x0, 0x0, 0x30, 0x2e, 0x2e]}}, &(0x7f0000000180)=""/84, 0x122, 0x54, 0x1, 0x8}, 0x28)
mmap(&(0x7f0000000000/0xfbe000)=nil, 0xfbe000, 0x2, 0x31, 0xffffffffffffffff, 0x0) (async)
mmap(&(0x7f0000000000/0xfbe000)=nil, 0xfbe000, 0x2, 0x31, 0xffffffffffffffff, 0x0)
r1 = bpf$BPF_PROG_WITH_BTFID_LOAD(0x5, &(0x7f0000000240)=@bpf_lsm={0x18, 0x7, &(0x7f0000000180)=@raw=[@func={0x85, 0x0, 0x1, 0x0, 0x4}, @exit, @initr0, @exit, @func={0x85, 0x0, 0x1, 0x0, 0xfffffffffffffffc}, @exit], &(0x7f00000000c0)='GPL\x00'}, 0x78)
bpf$BPF_GET_PROG_INFO(0xf, &(0x7f0000000580)={r1, 0xe0, &(0x7f0000000380)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, ""/16, 0x0, 0x0, 0x0, 0x0, 0x7, 0x0, &(0x7f0000001680)=[0x0], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x8, 0x0, 0x0}}, 0x10) (async)
bpf$BPF_GET_PROG_INFO(0xf, &(0x7f0000000580)={r1, 0xe0, &(0x7f0000000380)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, ""/16, 0x0, 0x0, 0x0, 0x0, 0x7, 0x0, &(0x7f0000001680)=[0x0], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x8, 0x0, 0x0}}, 0x10)
r2 = bpf$MAP_CREATE(0x0, &(0x7f0000000240)=@base={0x19, 0x4, 0x8, 0x8, 0x9020, 0x1, 0x0, '\x00', 0x0, 0xffffffffffffffff, 0x0, 0x2, 0xfffffffc, 0x0, @value=r0}, 0x50)
bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x5, 0xc, &(0x7f0000000000)=@framed={{}, [@ringbuf_output={{0x18, 0x1, 0x1, 0x0, r2}, {}, {}, {}, {}, {}, {}, {0x85, 0x0, 0x0, 0x57}}]}, &(0x7f0000000200)='GPL\x00', 0x9, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90)

945.011373ms ago: executing program 4 (id=3009):
r0 = socket$tipc(0x1e, 0x5, 0x0)
setsockopt$TIPC_GROUP_JOIN(r0, 0x10f, 0x87, &(0x7f0000000140)={0x10000042}, 0x10)
r1 = socket$kcm(0x11, 0x3, 0x0)
r2 = openat$tun(0xffffffffffffff9c, &(0x7f0000000100), 0x0, 0x0)
ioctl$TUNSETIFF(r2, 0x400454ca, &(0x7f0000000040)={'syzkaller0\x00', 0x2})
r3 = openat$tun(0xffffffffffffff9c, &(0x7f0000000400), 0x0, 0x0)
close(r3)
socket$nl_generic(0x10, 0x3, 0x10)
ioctl$SIOCSIFHWADDR(r3, 0x8914, &(0x7f0000002280)={'syzkaller0\x00', @multicast})
r4 = socket$unix(0x1, 0x1, 0x0)
r5 = socket$nl_route(0x10, 0x3, 0x0)
ioctl$sock_SIOCGIFINDEX(r4, 0x8933, &(0x7f0000000100)={'syzkaller0\x00', <r6=>0x0})
unshare(0x22040480)
sendmsg$nl_route_sched(r5, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000680)={&(0x7f00000007c0)=@newqdisc={0x58, 0x24, 0x4ee4e6a52ff56541, 0x70bd25, 0x25dfdbfb, {0x0, 0x0, 0x0, r6, {0x0, 0x2}, {0xffff, 0xffff}, {0xb}}, [@qdisc_kind_options=@q_sfb={{0x8}, {0x2c, 0x2, @TCA_SFB_PARMS={0x28, 0x1, {0xa, 0x7f61, 0x1800000, 0xc5, 0xe23, 0x1, 0x1, 0x7fff, 0x1}}}}]}, 0x58}, 0x1, 0x0, 0x0, 0x20008001}, 0x20048010)
sendmsg$nl_route_sched(r5, &(0x7f0000000200)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000300)=@newqdisc={0x30, 0x24, 0x4ee4e6a52ff56541, 0x70bd2a, 0x80000, {0x0, 0x0, 0x0, r6, {}, {0xffe6, 0xb}, {0xfff2, 0x2}}, [@qdisc_kind_options=@q_pie={{0x8}, {0x4}}]}, 0x30}, 0x1, 0x0, 0x0, 0x2000c061}, 0x4048080)
setsockopt$sock_attach_bpf(r1, 0x107, 0xf, &(0x7f0000000600), 0x56)
sendmsg$kcm(r1, &(0x7f00000000c0)={&(0x7f0000000580)=@xdp={0x2c, 0x4, r6, 0x3e}, 0x80, &(0x7f0000000080)=[{&(0x7f0000000180)="27030200590214000600002fb96dbcf706e10500000086ddffff1144ee163cd4b8bf4a31accbe1ba0777cfbf6ae77256da82f6184b8a34f9015cc99e570000002b21c90b000000000000721a5dbb56a3d9e16e7c2179c9b5b24722944820e624fc5b17d0822ca4232c98a9936ba722475ca5", 0x72}, {&(0x7f0000000440)="63f805d7649496db72959832930469edc7b700c9e37eed5653ecb716cdb8981cd819af0b33254465cc904b7b31789d65c0e0d33330e2ef36205dd154e363bcadf8f2ea93f45503c6d9fd8dfe5a638cfeb9f79c930a4d18260e5a08ffd35ed8371cff78119319b2b62c7cd9378c73ae90c801681f55ef26cb00"/135, 0x87}, {&(0x7f0000001400)="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", 0x17f}], 0x3}, 0x0)
r7 = socket$nl_route(0x10, 0x3, 0x0)
sendmsg$nl_route(r7, &(0x7f00000006c0)={0x0, 0x0, &(0x7f0000000100)={&(0x7f0000000180)=ANY=[@ANYBLOB="db00"/16, @ANYRES32=0x0, @ANYBLOB="2009000040000000200012800e00010069703665727370616e0000000c0002800600030002000000"], 0x40}, 0x1, 0x0, 0x0, 0x8000}, 0x8000)
r8 = socket$nl_route(0x10, 0x3, 0x0)
r9 = getpid()
sendmsg$nl_route(r8, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000140)={&(0x7f00000009c0)=ANY=[@ANYBLOB="180100005400000128bd7000fddbdf2507000000", @ANYRES32=r6, @ANYRES16=r8, @ANYRES32=r6, @ANYBLOB="01000100fe80000000000000000000000000000f8edd000020000100", @ANYRES32=r6, @ANYBLOB="01020300fc02000000000000000000000000000086dd000020000100", @ANYBLOB="9f1c27e794c7e063543e2e01023e657b4007c9e32cd0b1dfd8e179b80f2b6cd5b148dd58dab0169bdbd035cac915aea5b7aad01554d2dee8e150759a6268ec8ff7f284e5d516562a4e9ab25a596db5eee370b165d79e44127588d059d008a825b758750e1a4d46b25a36159e17468083d2cea573b0da30a44c043f7ffea50677ba1e7654606cec8b02373459ca30122e7938902f992bb639064dffff3214b413ac1d4a89fe29a91a089f6e1dfe1c8ee45f62bf629f52d1117604f87b2504e9a0b8b90d1c5430aa878d57879faa", @ANYBLOB="010100000a010101000000006de1801257f185fd0000000000000000", @ANYRES32=r6, @ANYBLOB="00000200640101000000000000000000000000000800000020000100", @ANYRES32=r6, @ANYBLOB="00030100fe8000000000000000000000000000aa0800000020000100", @ANYRES32=r6, @ANYBLOB="00020100fe8000000000000000000000000000bb0800000020000100", @ANYRES32=r6, @ANYBLOB="00020000fc0000000000000000000000000000012000010000000000303a33e3d5851cc463a773da75274d6c3259006e9d32a50191fc82c6b2e8f1ca8ddb53857df4", @ANYRES32=r5, @ANYBLOB="00020400fe8000000000000000000000000000108edd0000"], 0x118}, 0x1, 0x0, 0x0, 0x20000010}, 0x0)
syz_emit_ethernet(0x4e, &(0x7f00000003c0)=ANY=[@ANYBLOB="aaaaaaaaaaaaaaaaaaaaaabb86dd60f91e2e00183c00fe880000000000000000000000000001ff020000000000000000000000000001880000000000010000000000000290"], 0x0)
getsockopt$sock_cred(r0, 0x1, 0x11, &(0x7f0000000040)={0x0, <r10=>0x0}, &(0x7f0000000080)=0xc)
setsockopt$sock_cred(r0, 0x1, 0x11, &(0x7f0000000100)={r9, r10}, 0xc)
r11 = socket$tipc(0x1e, 0x2, 0x0)
socket$nl_netfilter(0x10, 0x3, 0xc)
setsockopt$TIPC_GROUP_JOIN(r11, 0x10f, 0x87, &(0x7f0000000000)={0x2042, 0xfffffffd}, 0x10)
bpf$BPF_PROG_WITH_BTFID_LOAD(0x5, &(0x7f0000000700)=@bpf_tracing={0x1a, 0x2, &(0x7f0000000840)=ANY=[@ANYBLOB="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"], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x24bba}, 0x94)
bpf$BPF_PROG_QUERY(0x10, &(0x7f0000000380)={@fallback, 0xb, 0x0, 0xffffff39, &(0x7f0000000180), 0x0, 0x0, &(0x7f00000002c0)=[0x0], &(0x7f00000002c0), &(0x7f0000000640)}, 0x40)

840.295289ms ago: executing program 0 (id=3010):
r0 = socket$netlink(0x10, 0x3, 0x0)
r1 = socket$netlink(0x10, 0x3, 0x10)
r2 = socket$netlink(0x10, 0x3, 0x10)
bind$netlink(r2, &(0x7f0000514ff4)={0x10, 0x0, 0x0, 0x2ffffffff}, 0xc) (async)
setsockopt$sock_int(r0, 0x1, 0x4, &(0x7f0000000000)=0x80, 0x2) (async)
r3 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000540)={0x11, 0x3, &(0x7f0000000800)=@framed={{0x18, 0x0, 0x0, 0x0, 0x7, 0x0, 0x0, 0x0, 0xfffffffe}}, &(0x7f0000000100)='GPL\x00', 0x0, 0x0, 0x0, 0x40f00, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x5}, 0x94)
bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000200)={&(0x7f00000004c0)='contention_begin\x00', r3}, 0x10) (async)
r4 = socket$inet_smc(0x2b, 0x1, 0x0)
getsockopt$inet_mreqn(r4, 0x0, 0x558e217067cba8bc, 0x0, &(0x7f00000003c0))
setsockopt$netlink_NETLINK_BROADCAST_ERROR(r2, 0x10e, 0x4, &(0x7f0000000180)=0x800, 0x4) (async)
r5 = syz_genetlink_get_family_id$devlink(&(0x7f0000000040), 0xffffffffffffffff)
sendmsg$DEVLINK_CMD_RATE_NEW(r1, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000700)={&(0x7f0000000300)={0x34, r5, 0x1, 0x0, 0x25dfdbfb, {0x25}, [@handle=@nsim={{0xe}, {0xf, 0x2, {'netdevsim', 0x0}}}]}, 0x34}, 0x1, 0x0, 0x0, 0x41}, 0x0)
r6 = socket(0x200000000000011, 0x2, 0x0) (async)
r7 = socket$nl_rdma(0x10, 0x3, 0x14)
bpf$BPF_PROG_WITH_BTFID_LOAD(0x5, &(0x7f0000000300)=@bpf_lsm={0x4, 0x4, &(0x7f00000003c0)=ANY=[@ANYBLOB="660a000000000000611158000000000085000000ce00000095"], &(0x7f0000000080)='syzkaller\x00', 0x4}, 0x94) (async)
sendmsg$RDMA_NLDEV_CMD_SET(r7, &(0x7f0000000140)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f00000001c0)=ANY=[@ANYBLOB="240000001b1401002abdd444d446df250800010000000000090002"], 0x24}, 0x1, 0x0, 0x0, 0x4000801}, 0x40810)
ioctl$sock_SIOCGIFINDEX(r6, 0x8933, &(0x7f0000000080)={'team0\x00', <r8=>0x0})
sendmsg$nl_route(r0, &(0x7f0000000200)={0x0, 0x0, &(0x7f0000000540)={&(0x7f0000000240)=@newlink={0x3c, 0x10, 0xff05, 0x0, 0x0, {0x0, 0x0, 0x4a00}, [@IFLA_LINKINFO={0x14, 0x12, 0x0, 0x1, @batadv={{0xb}, {0x4}}}, @IFLA_MASTER={0x8, 0xa, r8}]}, 0x3c}}, 0x0) (async)
sendmsg$can_bcm(0xffffffffffffffff, &(0x7f0000000000)={0x0, 0x0, 0x0}, 0x0)
r9 = socket$inet(0x2, 0x2, 0x0)
setsockopt$inet_mreqn(r9, 0x0, 0x23, &(0x7f0000000740)={@multicast2, @loopback}, 0xc) (async)
setsockopt$inet_msfilter(r9, 0x0, 0x29, &(0x7f0000000000)=ANY=[@ANYBLOB="e00000027fa80a010100000004"], 0x57) (async)
r10 = socket$netlink(0x10, 0x3, 0x0) (async)
bind$inet6(r6, &(0x7f0000000280)={0xa, 0x4e22, 0x7, @private0={0xfc, 0x0, '\x00', 0x1}, 0x81}, 0x1c)
writev(r10, &(0x7f00000003c0)=[{&(0x7f0000000380)="390000001300034700bb65e1c3e4ffa6010000000100000056000000250000001900040004000007fdd411efc4080004000000000000000000", 0x39}], 0x1) (async)
mmap(&(0x7f0000001000/0xc00000)=nil, 0xc00000, 0x3000004, 0x3032, 0xffffffffffffffff, 0x0) (async)
r11 = socket(0x2, 0x400000000002, 0x0)
setsockopt(r11, 0x0, 0x20, &(0x7f00000012c0)="15020000", 0x4) (async)
writev(r10, &(0x7f00000001c0)=[{&(0x7f0000000400)="390000001300034700bb5be1c3e4feff06000000010000004500000025000000190004000400ad000200000000000006040000000000f93132", 0x39}], 0x1)
setsockopt(0xffffffffffffffff, 0x84, 0x7d, 0x0, 0x0)

837.153669ms ago: executing program 3 (id=3011):
openat$tun(0xffffffffffffff9c, &(0x7f0000000100), 0x0, 0x0) (async, rerun: 64)
socket$nl_generic(0x10, 0x3, 0x10) (async, rerun: 64)
r0 = socket$inet6_tcp(0xa, 0x1, 0x0)
setsockopt$inet6_tcp_int(r0, 0x6, 0x13, 0x0, 0x0) (async)
connect$inet6(r0, &(0x7f0000000440)={0xa, 0x204, 0x0, @loopback}, 0x1c) (async)
r1 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000080)='memory.events\x00', 0x275a, 0x0)
r2 = socket$inet6_sctp(0xa, 0x1, 0x84)
setsockopt$sock_attach_bpf(r2, 0x1, 0x32, &(0x7f0000000000)=r1, 0x4)
r3 = socket$inet6_sctp(0xa, 0x5, 0x84)
setsockopt$inet6_mreq(r3, 0x29, 0x1b, &(0x7f0000000080)={@dev={0xfe, 0x80, '\x00', 0x28}}, 0x14)
socket$nl_route(0x10, 0x3, 0x0) (async)
r4 = socket$inet6_sctp(0xa, 0x5, 0x84)
setsockopt$inet6_mreq(r4, 0x29, 0x1b, &(0x7f0000000200)={@dev={0xfe, 0x80, '\x00', 0xd}}, 0x14) (async, rerun: 64)
setsockopt$inet6_tcp_TLS_TX(r0, 0x11a, 0x1, &(0x7f0000000080)=@ccm_128={{0x303}, "972379f9e7dc740d", "7fc1fc9366298414bc59af21b45e3473", "9f86d65b", "02f05c775331787f"}, 0x28) (async, rerun: 64)
sendmsg(r4, &(0x7f0000000400)={&(0x7f0000000000)=@x25={0x9, @remote={'\xcc\xcc\xcc\xcc\xcc\xcc\xcc\xcc\xcc\xcc\xcc\xcc\xcc\xcc', 0x1}}, 0x80, &(0x7f00000001c0)=[{&(0x7f0000000240)="4b4d99134c478d16c4f3f9d48a2744800ff2b2371a1758e345fa6fed7ff9263da97af2f0b9ac9c0f8ac4767d44a8eb53faa99b000211d4d188e28b3ed2c985d0cab23802a34e823fad56c10371cf4dfc2d246eee7dc7165ba3506fa7831a70c0f23e8851f796b49cdebe8487c3ca85a61523f95fa3ddd6c190983d282f20ac8f12a7a7d60095266bf90376b147ba2e2fab40fd21c68d1fa53831375b668e13b63a20e86c6e5757d6de0d14e32702ee99f8b05a1210b2232c240df946", 0xbc}, {&(0x7f0000000300)="24fde432ae647f0588ec460750a7cc43b649d63c471bb77589ea7a2af32ae5ba55e531d15ecf765b52a2023d642c599798685769534b7578a877dd94783d7de7ca7a971b4836c4f440fadf97ddb49a571e874fabd5f8affb8031fe478f777f8ba748cd592f0f5a18d2255fc4debb256798b4705735314626cb361daaf06420c37b3d83c5601fe98916293bac6f65fd791a8a9bb265d0208827de63fb0a18d198db74df1265168ecfb4642e1b3698971f8f6e08d392b3a550a6c6725d1e34fa27a895a2c4fcf6e23ea3e0534e9ffb8f6b38b744a6fb7fd48884f9b652b722e1", 0xdf}], 0x2, &(0x7f0000000540)=[{0xb0, 0x88, 0x2, "b7c3cba0d461d6e1bbe8bec0e718d4e6e1cd6edba781b8c134d5d7b7df9bc5976170ce6577ae61c2bfed66c160766149d7fe19ee143ed0fe752683cd07135e9addf2dbfa50c59b2e15b0719a6d9e992a395ab79be953947675513b415d566a36e2e6fd82e6df849884177aa3bdcfd0b2da26424ab2df0a147b56513506d5072acc989c65823478cb6c1e27a71c3e4e4b19e14a0e22751c35f122bb47"}, {0x30, 0x111, 0x6, "2920512142fa90f2dfde28b1d3b9c56723aefeac5d374c1ad83785325c52a7"}], 0xe0}, 0x20004881) (async)
socket$phonet_pipe(0x23, 0x5, 0x2) (async, rerun: 32)
socket$unix(0x1, 0x1, 0x0) (async, rerun: 32)
socket$nl_route(0x10, 0x3, 0x0) (async)
socket$unix(0x1, 0x1, 0x0) (async)
socket$nl_route(0x10, 0x3, 0x0)
socket$kcm(0x10, 0x2, 0x0) (async)
socket$nl_route(0x10, 0x3, 0x0) (async, rerun: 32)
r5 = socket$alg(0x26, 0x5, 0x0) (rerun: 32)
bind$alg(r5, &(0x7f00000004c0)={0x26, 'skcipher\x00', 0x0, 0x0, 'ecb(camellia)\x00'}, 0x58) (async)
socket$nl_netfilter(0x10, 0x3, 0xc) (async)
accept4(r5, 0x0, 0x0, 0x800) (async)
r6 = socket$kcm(0x2b, 0x1, 0x0)
sendmsg$sock(r6, &(0x7f0000000500)={0x0, 0x0, 0x0, 0x0, &(0x7f0000000440)=[@mark={{0x14, 0x1, 0x4f, 0x594}}], 0x18}, 0x20008044)
socket$nl_route(0x10, 0x3, 0x0)
syz_genetlink_get_family_id$nl80211(&(0x7f0000000080), 0xffffffffffffffff)

707.751605ms ago: executing program 3 (id=3012):
r0 = socket$nl_xfrm(0x10, 0x3, 0x6)
sendmsg$nl_xfrm(r0, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000940)=@newsa={0x184, 0x10, 0x1, 0x0, 0x0, {{@in6=@private1, @in=@dev={0xac, 0x14, 0x14, 0x31}, 0x4e21}, {@in=@broadcast, 0x0, 0x32}, @in6=@private1, {0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff}, {}, {0x0, 0xfffffffc}, 0x0, 0x0, 0x2, 0x0, 0x0, 0x42}, [@algo_crypt={0x48, 0x2, {{'cbc(aes)\x00'}}}, @algo_auth_trunc={0x4c, 0x14, {{'cmac(aes)\x00'}}}]}, 0x184}, 0x1, 0x500000000000000}, 0x4004)

572.067792ms ago: executing program 3 (id=3013):
r0 = socket$nl_route(0x10, 0x3, 0x0)
r1 = socket$nl_generic(0x10, 0x3, 0x10)
r2 = syz_genetlink_get_family_id$ethtool(&(0x7f0000000200), 0xffffffffffffffff)
r3 = socket$nl_generic(0x10, 0x3, 0x10)
ioctl$sock_SIOCGIFINDEX(r3, 0x8933, &(0x7f0000000040)={'lo\x00', <r4=>0x0})
sendmsg$ETHTOOL_MSG_FEATURES_SET(r1, &(0x7f0000000440)={0x0, 0x0, &(0x7f0000000400)={&(0x7f0000001640)={0x38, r2, 0x1, 0x70bd2c, 0x25dfdbff, {}, [@ETHTOOL_A_FEATURES_HEADER={0xc, 0x1, 0x0, 0x1, [@ETHTOOL_A_HEADER_DEV_INDEX={0x8, 0x1, r4}]}, @ETHTOOL_A_FEATURES_WANTED={0x18, 0x3, 0x0, 0x1, [@ETHTOOL_A_BITSET_NOMASK={0x4}, @ETHTOOL_A_BITSET_BITS={0x10, 0x3, 0x0, 0x1, [{0xc, 0x1, 0x0, 0x1, [@ETHTOOL_A_BITSET_BIT_NAME={0x5, 0x2, '\x00'}]}]}]}]}, 0x38}, 0x1, 0x0, 0x0, 0x818}, 0x20000004)
ioctl$sock_ipv6_tunnel_SIOCDELTUNNEL(0xffffffffffffffff, 0x89f2, &(0x7f0000000240)={'ip6_vti0\x00', &(0x7f0000000180)={'syztnl2\x00', <r5=>0x0, 0x2f, 0x0, 0xe, 0x8, 0x12, @private1={0xfc, 0x1, '\x00', 0x3}, @remote, 0x20, 0x20, 0x7, 0x5}})
sendmsg$ETHTOOL_MSG_PRIVFLAGS_GET(r1, &(0x7f0000000340)={&(0x7f0000000100)={0x10, 0x0, 0x0, 0x80801200}, 0xc, &(0x7f0000000300)={&(0x7f00000002c0)={0x28, r2, 0x1, 0x70bd2b, 0x25dfdbff, {}, [@HEADER={0x14, 0x1, 0x0, 0x1, [@ETHTOOL_A_HEADER_DEV_INDEX={0x8, 0x1, r4}, @ETHTOOL_A_HEADER_DEV_INDEX={0x8, 0x1, r5}]}]}, 0x28}, 0x1, 0x0, 0x0, 0x8051}, 0x20040004)
sendmsg$nl_route_sched(r0, &(0x7f00000000c0)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x100}, 0xc, &(0x7f0000000080)={&(0x7f0000000040)=@gettclass={0x24, 0x2a, 0x10, 0x70bd2a, 0x25dfdbff, {0x0, 0x0, 0x0, r4, {0xfff1, 0x5}, {0x10, 0x4}, {0xf, 0x4}}, ["", "", ""]}, 0x24}, 0x1, 0x0, 0x0, 0x47f10d61cf364111}, 0x20048010)
sendmsg$nl_route(r0, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000440)=ANY=[@ANYBLOB="980000001000030425bd70000000000000000000", @ANYRES32=0x0, @ANYBLOB="0005000000000000180012800b0001006772657461700000000002800400120008000a00", @ANYRES32=0x0, @ANYBLOB="140035007665746831000000000000000000000044002b8008000800", @ANYRES32, @ANYBLOB="18000800"], 0x98}, 0x1, 0x0, 0x0, 0x24000804}, 0x10)

492.118586ms ago: executing program 4 (id=3014):
r0 = bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000480)={0x6, 0x13, &(0x7f0000000080)=ANY=[@ANYBLOB="1800000003000000000000000900000018110000", @ANYRES32=0x1, @ANYBLOB="0000000000000000b702000014000000b7030000000000008500000083000000bf0900000000000055090100bf000000950000000000000018110000", @ANYRES32, @ANYBLOB="0000000000000000b7020000000000008500000086000000bf91000000000000b7020000020000008500000085000000b7000000000000009500000000000000"], &(0x7f0000000140)='syzkaller\x00', 0x8, 0x9f, &(0x7f0000000240)=""/159, 0x41100, 0x42, '\x00', 0x0, 0x25, 0xffffffffffffffff, 0x8, &(0x7f0000000300)={0x8, 0x5}, 0x8, 0x10, &(0x7f0000000340)={0x1, 0x3, 0x1, 0x9a2}, 0x10, 0x0, 0x0, 0x9, &(0x7f0000000380)=[0xffffffffffffffff, 0xffffffffffffffff], &(0x7f00000003c0)=[{0x3, 0x5, 0x1, 0x5}, {0x0, 0x5, 0x1, 0x6}, {0x2, 0x3, 0x9, 0xc}, {0x3, 0x3, 0xd, 0x8}, {0x4, 0x1, 0x4, 0x6}, {0x3, 0x2, 0x6, 0x3}, {0x1, 0x1, 0xe, 0x9}, {0x1, 0x1, 0x3, 0xa}, {0x5, 0x1, 0x9, 0x6}], 0x10, 0x3}, 0x94)
mkdirat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000)='./cgroup/syz0\x00', 0x1ff) (async)
r1 = openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000), 0x200002, 0x0)
r2 = openat$cgroup_procs(r1, &(0x7f0000001040)='cgroup.procs\x00', 0x2, 0x0)
write$cgroup_pid(r2, &(0x7f0000000c40), 0x12) (async)
r3 = socket$nl_netfilter(0x10, 0x3, 0xc)
syz_emit_ethernet(0x76, &(0x7f0000000680)={@multicast, @remote, @void, {@ipv6={0x86dd, @icmpv6={0x0, 0x6, '\x00', 0x40, 0x3a, 0x0, @private0, @mcast2, {[], @pkt_toobig={0x2, 0x0, 0x0, 0x2, {0x9, 0x6, "c829e4", 0x9, 0x33, 0x1, @local, @initdev={0xfe, 0x88, '\x00', 0x0, 0x0}, [@fragment={0x4, 0x0, 0x6, 0x1, 0x0, 0x6, 0x67}], "d3897b1f4edff52d"}}}}}}}, 0x0) (async)
openat$cgroup_pressure(r1, &(0x7f0000001bc0)='cpu.pressure\x00', 0x2, 0x0) (async)
r4 = socket(0x10, 0x3, 0x0)
ioctl$sock_SIOCGIFINDEX(r4, 0x8933, &(0x7f0000000240)={'lo\x00', <r5=>0x0})
sendmsg$nl_route_sched(r4, &(0x7f0000000280)={0x0, 0x0, &(0x7f00000002c0)={&(0x7f00000001c0)=@gettclass={0x24, 0x2a, 0xe6457df45c10c059, 0x0, 0x25dfdbfc, {0x0, 0x0, 0x0, r5, {0x9, 0x3}, {0x0, 0xffe0}, {0xd, 0xfff1}}}, 0x24}, 0x1, 0x0, 0x0, 0x4000010}, 0x4044004) (async)
r6 = syz_genetlink_get_family_id$ethtool(&(0x7f0000001c80), 0xffffffffffffffff) (async)
ioctl$ifreq_SIOCGIFINDEX_batadv_hard(r3, 0x8933, &(0x7f0000001cc0)={'batadv_slave_0\x00', <r7=>0x0}) (async)
r8 = socket$nl_route(0x10, 0x3, 0x0)
ioctl$sock_SIOCGIFINDEX(r8, 0x8933, &(0x7f0000000040)={'veth0\x00', <r9=>0x0})
sendmsg$nl_route_sched(r8, &(0x7f0000001200)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000300)=@newqdisc={0xb4, 0x24, 0x4ee4e6a52ff56541, 0x70bd28, 0x0, {0x0, 0x0, 0x0, r9, {}, {0xffff, 0xffff}, {0xd}}, [@qdisc_kind_options=@q_gred={{0x9}, {0x110, 0x2, [@TCA_GRED_STAB={0x104, 0x2, "67797606fc5b7849b94861b82da112393422112256ac505b054ea8a927d38e539fe959f9ff79b74048f6b253ccde4b2ae38a12744a435e4c919ea9461a498b44dfb2d93a22521b628962150357808871b546b398e66833c397e8fd7b2fd01d46e7d3d5664c14c766571142f0a0fef40ed233574d05bc3ecd59d9532708a78d2d022a66021d2622dcd7ebb453453b0539a3aa3e29a6f132cda1529d0dd0bc030aca421dcf0907ce2bddf06ac96ba62a4c386dc147cd14d920ab719aaf8f2a41a381429b368503b6ed5fda2395d35c004289aa3a5c8bc07c4c16ff870690020c08e5a579b7d2e2f405e1ea0227e92d18a13d9d4f7006d41f1e512d4f4a0e770e54"}, @TCA_GRED_MAX_P={0x8, 0x4, 0x9}]}}]}, 0x140}, 0x1, 0x0, 0x0, 0x51}, 0x0) (async)
sendmsg$ETHTOOL_MSG_LINKINFO_SET(r4, &(0x7f0000001e40)={&(0x7f0000001c40)={0x10, 0x0, 0x0, 0x80000}, 0xc, &(0x7f0000001e00)={&(0x7f0000001d00)={0xd0, r6, 0x10, 0x70bd2d, 0x25dfdbfb, {}, [@ETHTOOL_A_LINKINFO_PHYADDR={0x5, 0x3, 0xe}, @ETHTOOL_A_LINKINFO_TP_MDIX_CTRL={0x5, 0x5, 0x60}, @ETHTOOL_A_LINKINFO_HEADER={0x44, 0x1, 0x0, 0x1, [@ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'veth1_macvtap\x00'}, @ETHTOOL_A_HEADER_DEV_INDEX={0x8, 0x1, r7}, @ETHTOOL_A_HEADER_FLAGS={0x8, 0x3, 0x1}, @ETHTOOL_A_HEADER_DEV_INDEX={0x8}, @ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'ip_vti0\x00'}]}, @ETHTOOL_A_LINKINFO_PHYADDR={0x5, 0x3, 0x3}, @ETHTOOL_A_LINKINFO_HEADER={0x48, 0x1, 0x0, 0x1, [@ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'bond_slave_1\x00'}, @ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'sit0\x00'}, @ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'rose0\x00'}, @ETHTOOL_A_HEADER_DEV_INDEX={0x8, 0x1, r9}]}, @ETHTOOL_A_LINKINFO_TP_MDIX_CTRL={0x5, 0x5, 0xb3}, @ETHTOOL_A_LINKINFO_TP_MDIX_CTRL={0x5, 0x5, 0x5}, @ETHTOOL_A_LINKINFO_TP_MDIX_CTRL={0x5, 0x5, 0x7}]}, 0xd0}, 0x1, 0x0, 0x0, 0x40}, 0xc000) (async)
sendmmsg(r3, &(0x7f0000001b80)=[{{&(0x7f0000000540)=@l2tp6={0xa, 0x0, 0xf, @remote, 0x6, 0x1}, 0x80, &(0x7f0000001900)=[{&(0x7f00000005c0)="4934c1d40bb682ec67cfd4fda4be313beca40fab2914fae6867c8abeeab3313445658314c9acf6373ad2a2cb64c7dbc628654c5eea2f3e3e1b6d51fb468eaf6a85a84d25253d787e35dbe86827183eb6c39e01547ccc8086575f0cfed0", 0x5d}, {&(0x7f0000000640)="56b4543a4ef2d20df4eccfe7e75422a69624669f924f1303c307ddb09b02b98d1e8068872a7a9487c4e3c95e59132db6f41cb55d9e18516a0d3907dd2aa162a9f40063b7938f3caab536a985b045851f0fc59ea560988f428666b847ee7df0d3e8d925e11ce49d55487ca6f7c2f8b5efb2298aa051836f46f76c61b10a61e02ef0182feca591bc1c14a65c6d99a0546ceea95ac1b9798a2dd586d96b378fa7ec29399d1aa69dd9f45a7118e3fafa241f4bb8b37ea9a5517e745c92df9105005efb171a5adfcb2aa64b19b7cdcfbe00a925bdaf5aa13aec7357b43df4dadbb538fa773e398d0ece06444a75fd7177f7fd1b0b67c6f51c35e58ff0fc2828dcee6d67945894ed60af95607e9317ff069db8fb13649d6dcaf6154f2e35cae4a238ae883f7fd2c779e5708a373894b6c4cff11395cae6e51c774ae94dafd321a89290878d8e198501b902a40917f7e6906dc5d4c2aeef8651880dd2a0953a4978ac7d3fba9db1891fc090c86831efd3a6863d25f5c6928a51b9e51e36eae2e7b8207309bd3a1d8f0dd44a41dfb2d84c0d28927c21caaa2ce3ac2e2fb9948e4523dd116c3c808f1791264235b4967639486f16c6a0b453cc67daff0fe35f94a688eefbf634856412ea17483f7a51b4519118d6d973277af43368c70fbbf79161edbe0abe4f76d013a0da337bb1a0ed2962be939c0c4691d17ec1ddc03aab2f31cdd54132dce0737c77089cb464eea0e65a17db11764081a9e8463611ea3d7eca313be21d7e272d4a630231e7f1fa9a92c0696014d49e6a0105b800dedb337f23662f549a60bbef235e9bac26d2b5d7ec5f5f562e89e20ae505871161b107e7340da6c37a29fdfde2585e7cfaa2877d8e6b1e43a2a55930019c228498a619ccf18c34a5bd8e7df00d1fd97dc9e79443f5146e1490bf1bd935e178e28349bddc79afb71c93dfd95d39688d6165d93f45d4ca43ecd60ae2e128a7d4ada8edfc84f42a1b58efec82d03769bc227cb6db228d5b78a12581d4d6e782310fb5a12b5b1632c009ee0860cc0cb04f7d6e6b299031b559adb418102f499dceb0b9541cd87dd04fe8cc3926ed2eab731b4fd81ea52a56ed20fae65a8918cef57cf947437fa6e6b812f22bd0204cd38e9250c9b70c3ccbda60a0ccd9c96737d759e525e6d57548f863d8530e2b78d00cfc4a53d9a4f61b644a600127b00b59432a9d22fadeb3daccc6ea871ed06b959be78ff4c806edd2c6a2d6dfc66bc7d86eadab2f6c6c20c61aa783217821a9e60dadbcd03bd091c17e473a8875620d8469c3ca79bbb5ec88a4f6a21fd8a0daefe31deb9b40a36ce6758cdf42ce5faec2756001fa1389bd804882a674bc6b00e9379d15daddcf2b7b67414eb57e0d22f14fdb596698c3daaecf815f609f63e3bbcc73ee677a78693fc43c2ab8b28cafb8df7f3602fa6eb40fc6c5e934a828c170e003644fca5620ede71688818df35409ab83ffae6dc52e1952e3547f4a6d742f1635f64afc9511bebc918619a6c553b59b9e4e475a19fafbd699af169dec6a426a530b86130f3734db94701fe4dfaa39adcc37f5820a72cc5c97274074a32814f6f88e8bc3e138cab6de3d2b08c7b8b1cbacd1cc72933828b5e320fe0c10cfc90a569fa5caff2c89272e7b218b792761e7eb88f0505e36c01518a8f67899c0a8318f958050a8154bded37f842abea6620045cef38275b113aaefb5dd3fb1b70d3e70028978a1f5dcc3ea2800a4be08236dcf432ea7ce5c5f2125d0cca68b2cfc6e19c3eeaa8dd749c360417a3ad4455c9d50bdac43f328215b581b0315ecf43d1944587547ce39f7fb9dd0cc15d0cf951d88f160d4bf803c46d6020b52c45d112b2739dad1fb21a6ba7765295632efa53ecbd722a612c7d1c7ab9ae7e6b276a232090a78d78bce53a88ab1c046e68a38f323a7275e91e0871da7ce960c128a1d54fca5559bac615fec577d81c98d711e91f03fd10b69c8f0dda80a0d4b559a47441b7589d9af5f128955b0f9c77447a723ef7c857a3f4724edff818a4c034a345e313e619546799b0b761acfa683f204d2ceb2905e0482e112c95a9d54955341498f3a96fa704877b581ce7c48078a26baea9f6ff598680f84470ba0224da515d029a07efe398fdaa75cae452eb41095bf39937fa497157c3f657f191b15c3297989ebfd50b0da9dad3b9aea63c4ae6a9e1b3f6bfe054f817aa2118d3716b906323363ce30ff3ae87e948c801874b6adec858ed19eaca9f1281ad8048d3aeebc192d33519b10518c0df2634d74966a5521690b04e68c9b951992bf59e807576a3c5873727e7f7fc79da6295b8a601b36a153ab131bcac5b34341d6c8ef3ebd8853883a3b671d28858264c2b0d39e0a35e59263d0a2d3aa36ac386c4de631b7b2fa2e768f95b27422b95d1e6569f73df7019527c16c0713d63332b78f72ce98e9fc615a757296cf39bf50f463640d471fee1b5cac2a3299fd5bd680db8d18d1947c598f696e21218f3dff68971a4aaf8c005919f0dd35faa5f34f5226deef5c412554b9e427b9e3f34fbfeaa9d7c177c36e477d6e7302c3858d6218da9c1bd1eddaa0a4b70df4e2136ba3a3b64c3f3926d676610a9d8c5f5b0e4e60330c447024c6b073395f76f56c516a9513d9d2968b0cd6da7645c331ade429f6793969d384997adf53d220849633ea5ed42ab89d74f32eb94731ffbcc59d9fb17b20e771475dda2e7c0e3c71802ba96b2dfadee3fc542aabe14e2eeef0301d4ca96349403d3eef0a3b5c712753c05df8b234716aabd6a256d521753992ca87f42b78f41591f4a7ebc36ece67ff2db0b4811ce4ec29d93c3366de3a87ade2ca5e3fb9ff548b3a64a5365c8a4522520bd04750d5bff484f8df0aa9b6460f8fbe89b59b647e0dbd3fbbae3756d1051c0e1ff8aad1f42f10d8e517e8aa9bf5bdaa5c3f3e2b03c053a8de77debb7a79065cde61e226418cd77a10994f7603665a7744c603f1540a5076f560432c6706b7bc948fe71dda305e5a2f18d074f235d2d083b0289dfb0f15f8d42a271f61dee97f13593de8d372a0d8e5de5922a2ff39447896ebe3bed0a856fce9466be73a5a2a20c9efd6945ecdecaccc28b72e9a9b04aef867e89bfd29877c46f2a0bafce2936ac03fce9e62a64af4f1c7f70741e67fb7e1ba8bdca6034914d555a03cd738f3e27f8b942ab6e59fba068d3481aa410478a3bfd96c40b214779a8306c00912a47a31ddc3343a1e9e34470907c0f15bbf59b7790887ba23fa8874bc1ed9ff6cae24f3acd85c80a2e50128b64a2d0438d39e91c742baf1906b4d57adb8e35b45b10dc14c854af2dbb05509aa78b9d54f86386b7ab3bbbde567e47fbb71054066c20e5f10b37e55646a67d2963dd25b5509e2727f435f0085173e56d1b36842f4bc7a5b729f616a579266472ceaa5ee41025ab0740ed5ae124490f3d23b350da2ddfbc4d5240a954609609a76a5c7f689ba5e2d0d60fb5b0e40260c421e247f04301787cbfe74a8d304fec109234e9f25d90ca429135338dc859dc6124b8d3a2b4554e1995800cfd5bc9046d41166da77e96f0366fddb8891131cc843ffb5ac54ad317382a3d5c06b5df5c6c972f6f1265e4dde7a1e01732a29d990b9315a804f54718d28e4b35d5c7ad0aaeaf6b0a48761d99ce8c16950278ea86ff61d4a5ab5ec54bb76b46c932dc4d12c923465c525a3f0c7c0a111855680e6b193ef9b0be11fce88403aa83fb6c5718d35028095fff078a9c38fc03c9520199e296743ee6a75028c44737370d86a2f27016da925ec51fcb886755fb413350a4503a663ab4b20633dd6b69aad2923dedf69d5a28f85e6a3ffb62a2f5a0b3b6aa4c6deac7eb21d4a454ae89059b53d59f7813553f65088e03f25c70d89a0a72e25e16a02371f39334a8dfd85f310c263f6e8b44ac77fa4db3fc55828a826d2a6d7b1bc4cc00597b25ed9fb5ba8753ee0457f719950b002a6995b1da0ff48e7a3e766836ed985911e8dad1981a7bd1e1ba087c072410006352c18048bb6a6704f254a26cde8986ae0653013784ff0e19436a378c88c5f2d901395e2f51ea8a55e5533523e776aa0d5cd8af4db2f238ac8efb853e1f7ca3ad64891c8f4cc3a3e3a2eac0f02ed4323e32482200f63219649d0e9566b7bc10806cacffe6504db25c2dddfe4c8efd7fa12483ed0673b64683fb4bebc7cb232838cdef0917380140da29a516f1508529445b4b2358094c5720d00e2993a02889590ca89a9e81570f4942baaea7748b3cae352de8632651c06ef5b0f865943397ae9a85962ab9838a0b536321ec2eda47a68b064cfed6eb2876c1d7d79b2d57b63c4c0bfd4576ae99b4a2264a4f19d80c78a7197cfc5740346a9ad0bb42394b3923647a001515d2d5be52dec15fa9d8655e8ce8419d4607337b62337b00045d1076d47620c9c09620da9d83559251d3990a112b76ba3607b9e6b27c72a4465d6b87e4fec8b680658fc1b812013d4304b3cc8ff2d442551460ae824245db3894f1dc0cce6ec7037f1ca0540ed33b1206816c37d7e3b9292c8ad51541245aaed93c7c1d2e94f55bebb4a1ad2a459c85ed2010ccd1899d12a46859bd89cd10415f8ca3d0943727115b5de1137672687a4778b22d43dfd1ac080a01c959854106499af836ac83d3b459a274cf2027332a5639db7c05ef40fd5bb16801f0bd4ad47d448791fdb942af8a91c2b33fb29f865f3c5a90fa8502e0da84293cc58b79a41266107af39a559661b326b8a170deb43cee6dcc34525f462209152cee137dc79416194ae27acc1fa32190e68df837106dc84664742beb411484253294acfa9d51fdf29fc30576aeb481f86d2ab3503c9f7f4452c696d332524739ca2429254d5378169e104b8fbccc19530334af2454cf33082f1df5f3b61188501a9b8b6c0104ef829586074593a38260384a750bd148d68954cc7c57e7948843ad32686509399a94a9e950d650b6980b348e79ebf4839dbefc02a53d593abfeaefa8dd3a149ad7e55f1d2a201f6e5427dfc7a6044e75eabf8c13b3079a0add9dc0aae7e266428ef7ba851d27524e25db1d18e21dc00db1afc2b545b28ef6bb71d0ecc352b80fa838f32b990669f013d6e3eb6cfff4e0c0ab3e5356b0a766d0a8d7b10715025beb88e3526f1be2d03d6c784eca42481f3aa12f97d141b73819f368ce29259ec69a144251b9a299ead9365b7cd3b6d2a9da951c1ccf6cb6e32f1cc9186cfcab65b2e3ce52dbaca60810aa189b73d30db2a204feefad8196e0378b967e44b3717536077e5fd7b699d6ec25e3702ddd3f9a1ef0ae0c403d5d5d8a44ecaaeebb693cc0cb881d82fcbd77564065be7fab69ccf61a877e2ba5eab1652a4d8a59b270e65f9a8d6ac9b8ac65db13f9c2e3ff3095f71fbd42d6535c9a337968f41244ed8ae207ee11191ee34eac8ac816476ddf96635bc944123fcbba97e354da39336d5ca1923409ec571ddcd7dee853454daa20b1c57cd30d350e63f1ed20692c63499fd8f747c2370b0a49db9fd90ef4216b4c27678ed2a36c6794483f5d2599aebf8ca6dcaed8da70dc590add232b5daf74cb212b1ed754aa7d1e1405fbd6f687d938ba4598a66265ce7a19e7ce49e7213989d37f1810b221cebf2d3d983c094b6723cbfce779bbbd34c8812e199eb5651149cb9a7baa4b28db1e0c1eca806acb3f3d9cbec3a382eef1df45e76fa00b2b4ad87113822ef0c55f04b120648ee3cd0ee1d3943ac30de8720414685efcaebe71b3ee8eb8735e7fca34c5f5bf753ef50420289", 0x1000}, {&(0x7f0000001640)="879f6df0a6bc3ee0fe38db41446d46a78f0a37b9259bd207b50976a2b0d351a1a72e653b5dc61dec62db6fb1bad94e9473591ddc7b787c58d69d8721610e2a7031c93629bc1a4d67", 0x48}, {&(0x7f00000016c0)="44f551b0ac9c105e7e7ac4ab0f16a73fa33e1ecabf9f5aa9d7f55584f4369ac712c6981e49b697797dadbc9f68e15bf1cf42456a7ddbe9a90e4f7f158c6eb6899d3f8a8ff6709cc9f22f1a8c55ef98d1502c6d1872c94f1fc1b958c527e416aa1d4fb94c8bb62f55ebbf9ec42b4442bbb5e0dfc354cd513b444579bae373d6519d2b8cb831049d220fc1f0fcc9ca690fdbc4", 0x92}, {&(0x7f0000001780)="ba6cd6faed9bbe851f17fb0e6d273d85494c8a98faae6a3b02023a7bb6cde8039e856b66ab965ed527e8f1320c6a8e5f1d5c78113e716b29979105e8f9c6457672677f9bbf8182cdbd51d9d84b28b60cff5245b7e0366cb814714169599086e91f3ab7ce1b18a7bc4ce0fdf91c353b8fa6fa6d6dc04c5b71b5af5cb3c3d762419ad1fb262bfb2822ec0f0e7560d260edbc5a04270d43f8172a0b65e1360736e4bb9464f66b32f1f34284670e2610753ecdc228c7e15611dbc107b41811bbad00a7153a82efbf0acf6ca35b47c91a974f394293a3b68cb16013dce017", 0xdc}, {&(0x7f0000001880)="f4987bbf03bdf1539e2290f5cd66ce540dfc9f327ca302e822600662f6f6b6f2de8deb3ec08ba58e6fdc620747cd460288f9a55fa9d3705b533c9153badde4c2f95895d59c7a", 0x46}], 0x6, &(0x7f0000001980)=[{0x10, 0x10f, 0x6}, {0xd0, 0x101, 0x800, "4f3b51d78838711edd441916201cb551cb62b392a2086fbe9dac6e131bf85894941f938b3dd00157a02faf2954e0c56de6c287162a136b960c8ee287c3777ec22e14ea142afe2d59a991f0a120097ef24cd18a21c1fe02dd2c62b1bf49b274071c229662ee2a305bf29abc1fba849baa3dd870e06fe88bc791caa5c81d5081a60804ebe5e12ebde989534caa69c26749100594b4469bce2077ac47996693da36a9e21a88f93a80e7fbdbefa7b00686fd8b11f86dbf5c5a35fa14603713"}, {0xf0, 0x111, 0x100, "eaa3a18085ac627b56dd6edb18fb7e07adb333b5e6b9ccd71966180199984069e7afa274296f7928ad80943a3fbfdd0348cc80d3e7c53feccc94aaa60d3710e1dab7ed49d778a65a714a12c785023b87ed20dd0d86f86fbea25da02d608e8ed698badb3a587da2e11eb88e39a80b035adbab65f73de464f2512932ac88e9927ffec1eff151d69b1fa62629859627c4ebaf79ea67667ff159cc6c4aa244cbc02e063bfde7ffbe735a61da77985ae344cc340415af406dbae5f4a78cf816a5d7a88fc3c1fe58df27a17672ab323da07398e6070f82cb04011b0c"}], 0x1d0}}], 0x1, 0x24000010) (async)
bpf$PROG_LOAD(0x5, &(0x7f0000000180)={0x1, 0x4, &(0x7f0000000040)=ANY=[@ANYBLOB="180000000000001400000000000000006301880000000000950010aeb069dee023c2086a4c6a0000"], &(0x7f0000000000)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, r0, 0x43}, 0x94) (async)
setsockopt$sock_attach_bpf(r3, 0x1, 0x32, &(0x7f0000001c00), 0x4)

419.178694ms ago: executing program 4 (id=3015):
r0 = syz_init_net_socket$netrom(0x6, 0x5, 0x0)
ioctl$sock_netrom_SIOCADDRT(r0, 0x890b, &(0x7f0000000280)={0x1, @remote={0xcc, 0xcc, 0xcc, 0xcc, 0xcc, 0xcc, 0x0}, @bpq0, 0x10000, 'syz0\x00', @rose={0xbb, 0xbb, 0xbb, 0x1, 0x0}, 0xfffffdb6, 0x2, [@default, @netrom={0xbb, 0xbb, 0xbb, 0xbb, 0xbb, 0x0, 0x0}, @default, @rose={0xbb, 0xbb, 0xbb, 0x1, 0x0}, @default, @default, @rose={0xbb, 0xbb, 0xbb, 0x1, 0x0}, @netrom={0xbb, 0xbb, 0xbb, 0xbb, 0xbb, 0x0, 0x0}]})
socket$inet_icmp_raw(0x2, 0x3, 0x1)
r1 = socket(0x29, 0x2, 0x0)
sendmsg$nl_route(r1, &(0x7f0000000380)={0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x4844}, 0x0)
bpf$PROG_LOAD(0x5, &(0x7f0000000b00)={0x11, 0xf, &(0x7f0000000680)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1}, 0x94)
r2 = socket$nl_netfilter(0x10, 0x3, 0xc)
setsockopt$inet_tcp_TCP_REPAIR_QUEUE(r1, 0x6, 0x14, &(0x7f0000000140), 0x4)
sendmsg$NFT_BATCH(r2, &(0x7f000000c2c0)={0x0, 0x0, &(0x7f0000000280)={&(0x7f00000003c0)=ANY=[@ANYBLOB="140000001000000000000000000400000000000a28000000000a0101000000005e1affd5020000000900010073797a300000000008000240000000032c000000030a01030000e6ff00000000020000000900010073797a30000000000900030073797a320000000014000000110001"], 0x7c}}, 0x0)
sendmsg$NFT_BATCH(r2, &(0x7f0000000100)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000500)=ANY=[@ANYBLOB="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"], 0x1ec}}, 0x0)
ioctl$sock_netrom_SIOCADDRT(r0, 0x890b, &(0x7f0000000000)={0x1, @remote={0xcc, 0xcc, 0xcc, 0xcc, 0xcc, 0xcc, 0x1}, @bpq0, 0xffff, 'syz1\x00', @remote={0xcc, 0xcc, 0xcc, 0xcc, 0xcc, 0xcc, 0x2}, 0x1, 0x0, [@null, @default, @netrom={0xbb, 0xbb, 0xbb, 0xbb, 0xbb, 0x0, 0x0}, @rose={0xbb, 0xbb, 0xbb, 0x1, 0x0}, @bcast, @remote={0xcc, 0xcc, 0xcc, 0xcc, 0xcc, 0xcc, 0x3}, @default, @default]})
ioctl$sock_netrom_SIOCADDRT(r0, 0x890b, &(0x7f0000000440)={0x1, @remote={0xcc, 0xcc, 0xcc, 0xcc, 0xcc, 0xcc, 0x1}, @bpq0, 0x8, 'syz1\x00', @rose={0xbb, 0xbb, 0xbb, 0x1, 0x0}, 0x7, 0x4, [@rose={0xbb, 0xbb, 0xbb, 0x1, 0x0}, @null, @remote={0xcc, 0xcc, 0xcc, 0xcc, 0xcc, 0xcc, 0x2}, @null, @default, @netrom={0xbb, 0xbb, 0xbb, 0xbb, 0xbb, 0x0, 0x0}, @netrom={0xbb, 0xbb, 0xbb, 0xbb, 0xbb, 0x0, 0x0}, @bcast]})
r3 = socket$inet_sctp(0x2, 0x5, 0x84)
r4 = socket$nl_netfilter(0x10, 0x3, 0xc)
sendmsg$NFT_BATCH(r4, &(0x7f0000000100)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f00000007c0)=ANY=[@ANYBLOB="140000001000010000000000000000000200000a20000000000a01080000000000000000030000000900010073797a310000000014000000020a010400000000000000080000000034000000140a03000000000000000000030000000800e19b2ef000090000000000000031000000000900020073797a3000000000140000001100010000000000000000000000000a338c03f24f0f9cff363289f93c8eb93ab6170ca8f621224e96b662da9f8a9fe4629d7357009fa4a8c91ba61a53d5e834c448931d18ff3d5ddf207f47e91be8deaada6aa92f36a2b18ea4056453580fdb6f253d69deaa7ae7358e9d3af444"], 0x90}}, 0x0)
getsockopt$PNPIPE_IFINDEX(0xffffffffffffffff, 0x113, 0x2, &(0x7f0000000600), &(0x7f0000000640)=0x4)
bpf$MAP_CREATE(0x0, &(0x7f0000000700)=ANY=[@ANYBLOB="1e006f9721acbd0848ab8b27000000f32700000505f600040b00000020400000ceb51321b283eceded2694787ce15243e5210056ca4454e727ca8c2da9e6a773902036442e85dc21b1793d3ad5f11de42e1cd3e6a2603a06ebf1b0255bf9d2469adf", @ANYRES32=r3, @ANYBLOB="1000"/20, @ANYRES32=r0, @ANYRES32, @ANYBLOB="0100000000000000020000000300"/28], 0x50)
setsockopt$inet_sctp_SCTP_NODELAY(r3, 0x84, 0x3, &(0x7f00000005c0)=0x3, 0x4)
r5 = ioctl$NS_GET_PARENT(0xffffffffffffffff, 0xb702, 0x0)
getsockopt$sock_cred(r0, 0x1, 0x11, &(0x7f00000001c0)={<r6=>0x0}, &(0x7f0000000200)=0xc)
ioctl$sock_FIOGETOWN(r0, 0x8903, &(0x7f0000000240)=<r7=>0x0)
sendmsg$nl_route(r1, &(0x7f00000004c0)={&(0x7f0000000180)={0x10, 0x0, 0x0, 0x10000}, 0xc, &(0x7f0000000300)={&(0x7f0000000dc0)=ANY=[@ANYBLOB="540000005800000227bd7000fedbdf250008000300", @ANYRES32=r5, @ANYBLOB="080001000400000008000200", @ANYRES32=r6, @ANYBLOB="0800010003e1000008000108000200", @ANYRES32=0x0, @ANYBLOB="08000200", @ANYRES32=r7, @ANYBLOB='\x00\x00\x00'], 0x54}, 0x1, 0x0, 0x0, 0x4000000}, 0x800)
setsockopt$SO_BINDTODEVICE_wg(r3, 0x1, 0x19, &(0x7f0000000080)='wg2\x00', 0x4)

320.192477ms ago: executing program 4 (id=3016):
r0 = socket$inet_udp(0x2, 0x2, 0x0)
bind$inet(r0, &(0x7f0000001a00)={0x2, 0x4e20, @dev={0xac, 0x14, 0x14, 0x40}}, 0x10)
connect$inet(r0, &(0x7f0000000040)={0x2, 0x4e24, @multicast1}, 0x10)
setsockopt$inet_udp_int(r0, 0x11, 0x67, &(0x7f0000000080)=0x6, 0x4)
sendto$inet(r0, &(0x7f00000000c0)="8689d46205a341", 0x7, 0x4000080, 0x0, 0x0)
r1 = socket$nl_xfrm(0x10, 0x3, 0x6)
mkdirat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000040)='./cgroup.net/syz0\x00', 0x1ff)
openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000040), 0x200002, 0x0)
sendfile(0xffffffffffffffff, 0xffffffffffffffff, &(0x7f00000001c0)=0x1000000000e17, 0x400000000004)
socket$inet6(0xa, 0x1, 0x700)
syz_genetlink_get_family_id$nl80211(&(0x7f0000000a00), 0xffffffffffffffff)
socket$nl_generic(0x10, 0x3, 0x10)
socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000280)={0xffffffffffffffff, <r2=>0xffffffffffffffff})
r3 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, 0x0, 0x0)
bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000200)={0x0, r3, 0x0, 0xd}, 0x18)
setsockopt$netlink_NETLINK_DROP_MEMBERSHIP(r1, 0x10e, 0x2, 0x0, 0x0)
r4 = syz_init_net_socket$nfc_llcp(0x27, 0x2, 0x1)
connect$unix(r4, &(0x7f0000000380)=@file={0x0, './file0\x00'}, 0x6e)
ioctl$sock_SIOCGIFINDEX(r2, 0x8933, &(0x7f0000000000)={'batadv_slave_0\x00'})
syz_init_net_socket$bt_sco(0x1f, 0x5, 0x2)
setsockopt$ax25_SO_BINDTODEVICE(0xffffffffffffffff, 0x101, 0x19, &(0x7f0000000000)=@bpq0, 0xfffffffffffffe1d)
syz_init_net_socket$nl_generic(0x10, 0x3, 0x10)
unshare(0x22020600)
r5 = socket(0x10, 0x3, 0x0)
recvmmsg(r5, &(0x7f0000005180), 0x400000000000166, 0x1a000, 0x0)
bpf$BPF_PROG_GET_FD_BY_ID(0xd, &(0x7f00000001c0)={0xffffffffffffffff}, 0x4)
accept4$ax25(r3, &(0x7f0000000140)={{0x3, @null}, [@remote, @null, @bcast, @null, @rose, @remote, @default, @netrom]}, &(0x7f0000000100)=0x48, 0x80000)
ioctl$sock_netdev_private(0xffffffffffffffff, 0x89f8, &(0x7f00000002c0)="37fd8a2a9c541dbf60165c55c74b0d9722bc870c5142fc137118abe96df7bc26921ab39250572409000000000000004d922043239e731c7ad73b2f40558352a48ac422d4f82c0664000468742207b5c7dfa920ec2054d6e24bf0eefac05ed34be1b1")
syz_init_net_socket$rose(0xb, 0x5, 0x0)

212.178797ms ago: executing program 3 (id=3017):
r0 = socket$packet(0x11, 0x3, 0x300)
getsockopt$packet_int(r0, 0x107, 0x9, 0x0, &(0x7f0000000640)=0xffffffffffffff48)
r1 = socket(0x10, 0x3, 0x0)
setsockopt$netlink_NETLINK_TX_RING(r1, 0x10e, 0xc, &(0x7f0000000040)={0x802}, 0x10)
sendmsg$nl_generic(r1, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000004200)={&(0x7f0000000200)={0x38, 0x5f, 0x1, 0x70bd2a, 0x0, {}, [@typed={0x24, 0x2, 0x0, 0x0, @str='\xd8&\xfc,FG\x87\x8c\xa2A\xa3\xc6\x94\x90\r\xa0J\xf9G\x8d\xf5\xd1u\xb1o\xe9\x1a\xb5\t\xfb\xca\xb4'}]}, 0x38}}, 0x4000800)
r2 = bpf$PROG_LOAD(0x5, &(0x7f0000000100)={0x11, 0x4, &(0x7f0000000240)=ANY=[@ANYBLOB="18000000000000000000000000000000850000007600000095"], &(0x7f00000001c0)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x80)
bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000000c0)={&(0x7f0000000080)='xdp_exception\x00', r2}, 0x10)
r3 = socket$inet_tcp(0x2, 0x1, 0x0)
r4 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000100)={0x6, 0x4, &(0x7f0000000200)=ANY=[@ANYBLOB="18020000fdffffee0000000000000000850000002c00000095"], &(0x7f0000000040)='GPL\x00', 0x5}, 0x94)
ioctl$sock_SIOCGIFINDEX(r3, 0x8933, &(0x7f0000000180)={'syz_tun\x00', <r5=>0x0})
bpf$BPF_LINK_CREATE_XDP(0x1c, &(0x7f00000003c0)={r4, r5}, 0x40)
syz_emit_ethernet(0x66, &(0x7f0000001880)={@broadcast, @random, @void, {@ipv4={0x800, @gre={{0x5, 0x4, 0x0, 0x22, 0x58, 0x66, 0x0, 0xe0, 0x2f, 0x0, @local, @local}, {{0x0, 0x0, 0x1, 0x1, 0x0, 0x1, 0x0, 0x1, 0x880b, 0x0, 0x2}, {0x0, 0x0, 0x1}, {0x1, 0x0, 0x1, 0x1}, {0x8, 0x88be, 0x1, {{0xc, 0x1, 0x80, 0x3, 0x1, 0x0, 0x3, 0x9}, 0x1, {0x9}}}, {0x8, 0x22eb, 0x4, {{0x7, 0x2, 0x1, 0x3, 0x1, 0x0, 0x3, 0x4}, 0x2, {0x7, 0x1, 0x0, 0x5, 0x0, 0x0, 0x3, 0x1}}}, {0x8, 0x6558, 0x3}}}}}}, 0x0)
r6 = socket$inet6(0xa, 0x80002, 0x0)
sendmmsg$inet6(r6, &(0x7f0000007240)=[{{&(0x7f0000000100)={0xa, 0x4e22, 0x6, @mcast2, 0x7}, 0x1c, 0x0}}, {{0x0, 0x0, &(0x7f0000001380)=[{&(0x7f00000012c0)="1ce02c7a", 0xfe60}], 0x1}}, {{0x0, 0x0, &(0x7f0000000000), 0x1}}], 0x3, 0x1c000)
shutdown(r6, 0x0)
ppoll(&(0x7f0000000140)=[{r6, 0x5}], 0x1, 0x0, 0x0, 0x0)
r7 = socket$nl_netfilter(0x10, 0x3, 0xc)
sendmsg$IPCTNL_MSG_CT_NEW(r7, &(0x7f0000000080)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000002800)={0xa4, 0x0, 0x1, 0x401, 0x0, 0x0, {0xa}, [@CTA_TUPLE_ORIG={0x3c, 0x1, 0x0, 0x1, [@CTA_TUPLE_IP={0x2c, 0x1, 0x0, 0x1, @ipv6={{0x14, 0x3, @empty}, {0x14, 0x4, @ipv4={'\x00', '\xff\xff', @multicast1}}}}, @CTA_TUPLE_PROTO={0xc, 0x2, 0x0, 0x1, {0x5}}]}, @CTA_TUPLE_REPLY={0x3c, 0x2, 0x0, 0x1, [@CTA_TUPLE_PROTO={0xc, 0x2, 0x0, 0x1, {0x5}}, @CTA_TUPLE_IP={0x2c, 0x1, 0x0, 0x1, @ipv6={{0x14, 0x3, @loopback}, {0x14, 0x4, @local}}}]}, @CTA_TIMEOUT={0x8}, @CTA_NAT_SRC={0x10, 0x6, 0x0, 0x1, [@CTA_NAT_PROTO={0xc, 0x3, 0x0, 0x1, [@CTA_PROTONAT_PORT_MAX={0x4}]}]}]}, 0xa4}}, 0x0)

173.135693ms ago: executing program 2 (id=3018):
socket$can_raw(0x1d, 0x3, 0x1) (async)
r0 = socket$can_raw(0x1d, 0x3, 0x1)
getsockopt$CAN_RAW_JOIN_FILTERS(r0, 0x65, 0x6, 0x0, &(0x7f0000000100)) (async)
getsockopt$CAN_RAW_JOIN_FILTERS(r0, 0x65, 0x6, 0x0, &(0x7f0000000100))
r1 = socket$packet(0x11, 0x3, 0x300)
setsockopt$packet_int(r1, 0x107, 0x14, &(0x7f0000000080)=0xfff, 0x4) (async)
setsockopt$packet_int(r1, 0x107, 0x14, &(0x7f0000000080)=0xfff, 0x4)
socketpair(0x1, 0x100000005, 0x0, 0x0)
sendmmsg(r1, &(0x7f0000000440)=[{{&(0x7f0000000700)=@xdp, 0x80, &(0x7f00000004c0)=[{0x0}], 0x1}}], 0x1, 0x0)
r2 = socket$nl_netfilter(0x10, 0x3, 0xc)
sendmsg$IPCTNL_MSG_TIMEOUT_NEW(r2, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000280)={&(0x7f0000000580)=ANY=[@ANYBLOB="540000000008010100000000000000000a000000050003002f0000000600024000000000240004800800024000000000080001400000fcff07000140800000010800014080000001090001"], 0x54}, 0x1, 0x0, 0x0, 0x4004}, 0x0)
bind$inet6(0xffffffffffffffff, &(0x7f0000000140)={0xa, 0x4e22}, 0x1c)
sendmsg$NFT_BATCH(0xffffffffffffffff, &(0x7f0000000000)={0x0, 0x0, 0x0}, 0x0)
r3 = socket$packet(0x11, 0x2, 0x300)
ioctl$sock_SIOCGIFINDEX(r3, 0x8933, &(0x7f0000000040)={'wlan0\x00'}) (async)
ioctl$sock_SIOCGIFINDEX(r3, 0x8933, &(0x7f0000000040)={'wlan0\x00', <r4=>0x0})
sendto$packet(r3, 0x0, 0x0, 0x0, &(0x7f00000000c0)={0x11, 0x11, r4, 0x1, 0x4, 0x6, @multicast}, 0x14)
r5 = socket$nl_netfilter(0x10, 0x3, 0xc)
sendmsg$NFT_BATCH(r5, &(0x7f0000000200)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000240)=ANY=[@ANYBLOB="140000001000010000000000000000000000000a20000000000a03000000000000000000010000000900010073797a30000000006c000000160a01020000000000000000010000000900010073797a30000000000900020073797a3000000000400003802c00038004000100766c616e31000000000000000000000014000100776c616e3100000000000000000000000800014000000000080002"], 0xfc}}, 0x0)
listen(0xffffffffffffffff, 0x0)
syz_emit_ethernet(0x42, &(0x7f0000000800)={@local, @link_local, @void, {@ipv4={0x800, @tcp={{0x5, 0x4, 0x0, 0x0, 0x34, 0x25, 0x0, 0x0, 0x6, 0x0, @rand_addr=0x64010101, @local}, {{0x0, 0x4e22, 0x41424344, 0x41424344, 0x0, 0x6, 0x8, 0xc2, 0x0, 0x0, 0x60, {[@exp_fastopen={0xfe, 0x5, 0xf989, '8'}, @exp_smc={0xfe, 0x6}]}}}}}}}, 0x0)
r6 = socket$nl_audit(0x10, 0x3, 0x9)
bind$netlink(r6, &(0x7f00000000c0)={0x10, 0x0, 0x25dfdbfe, 0x80000000}, 0xc)
r7 = socket$nl_audit(0x10, 0x3, 0x9)
bind$netlink(r7, &(0x7f00000000c0)={0x10, 0x0, 0x25dfdbfe, 0x80000000}, 0xc) (async)
bind$netlink(r7, &(0x7f00000000c0)={0x10, 0x0, 0x25dfdbfe, 0x80000000}, 0xc)
socketpair$unix(0x1, 0x5, 0x0, &(0x7f00000001c0)) (async)
socketpair$unix(0x1, 0x5, 0x0, &(0x7f00000001c0)={0xffffffffffffffff, <r8=>0xffffffffffffffff})
setsockopt$SO_ATTACH_FILTER(r8, 0x1, 0x1a, &(0x7f0000000000)={0x2, &(0x7f0000000080)=[{0x2d, 0x0, 0x7, 0x8000}, {0x6, 0xe0, 0x0, 0x1}]}, 0x10) (async)
setsockopt$SO_ATTACH_FILTER(r8, 0x1, 0x1a, &(0x7f0000000000)={0x2, &(0x7f0000000080)=[{0x2d, 0x0, 0x7, 0x8000}, {0x6, 0xe0, 0x0, 0x1}]}, 0x10)

73.605969ms ago: executing program 3 (id=3019):
socket(0x2a, 0x2, 0x0) (async)
sendmsg$nl_route_sched(0xffffffffffffffff, 0x0, 0x0) (async)
socket$inet6_mptcp(0xa, 0x1, 0x106) (async)
r0 = socket$inet_mptcp(0x2, 0x1, 0x106)
ioctl$sock_SIOCETHTOOL(r0, 0x89f1, &(0x7f00000002c0)={'ip6gre0\x00', &(0x7f0000000300)=@ethtool_rxnfc={0x2f, 0x2, 0x6, {0xe, @usr_ip6_spec={@empty, @dev={0xfe, 0x80, '\x00', 0x24}, 0xfffffff8, 0x3d, 0xe}, {0x0, @remote, 0xe, 0x4, [0x7, 0x6]}, @ah_ip4_spec={@remote, @initdev={0xac, 0x1e, 0x40, 0x0}, 0x0, 0x5}, {0x0, @broadcast, 0x8, 0x5, [0xf, 0x9]}, 0xff, 0x3}}})
socket$inet6_mptcp(0xa, 0x1, 0x106)
r1 = bpf$MAP_CREATE_RINGBUF(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="1b0000000000000000000000000004"], 0x48)
r2 = bpf$PROG_LOAD(0x5, &(0x7f0000000b00)={0x11, 0xf, &(0x7f0000000340)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r1, @ANYBLOB="0000000000000000b702000014000000b7030000000000008500000083000000bf0900000000000055090100000000009500000800000000bf91000000000000b702000043e7b5538500000085000000b70000000000000095"], &(0x7f0000000080)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x36, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94)
bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000000c0)={&(0x7f0000000140)='kmem_cache_free\x00', r2}, 0x10) (async)
ppoll(&(0x7f0000000500)=[{r1}], 0x1, 0x0, 0x0, 0x0) (async)
pselect6(0x40, &(0x7f0000000440)={0x0, 0x0, 0x3, 0xfffffffffffffff9, 0x9, 0x0, 0x8000000000, 0x800000000}, 0x0, &(0x7f00000002c0)={0x3ff, 0x0, 0x0, 0x4, 0x0, 0x0, 0x7fffffff}, 0x0, 0x0)
r3 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000480)='cgroup.controllers\x00', 0x275a, 0x0) (async)
r4 = socket$inet_udplite(0x2, 0x2, 0x88)
r5 = socket$inet(0xa, 0x801, 0x84)
listen(r5, 0x8) (async)
r6 = accept4(r5, 0x0, 0x0, 0x80000)
setsockopt(r6, 0x84, 0x7f, &(0x7f00000001c0)="020000000980ffff", 0x8) (async)
recvmmsg(r6, &(0x7f0000003dc0)=[{{0x0, 0x0, &(0x7f0000000640)=[{&(0x7f0000000040)=""/94, 0x5e}], 0x1}, 0x5076}], 0x1, 0x20, 0x0) (async)
ioctl$sock_ipv4_tunnel_SIOCCHGTUNNEL(r4, 0x89f3, &(0x7f0000000040)={'syztnl2\x00', &(0x7f0000000540)={'sit0\x00', 0x0, 0x40, 0x7800, 0x7, 0x7, {{0x19, 0x4, 0x1, 0x1, 0x64, 0x64, 0x0, 0x1, 0x4, 0x0, @initdev={0xac, 0x1e, 0x1, 0x0}, @dev={0xac, 0x14, 0x14, 0x15}, {[@lsrr={0x83, 0x23, 0x6b, [@initdev={0xac, 0x1e, 0x0, 0x0}, @multicast1, @remote, @multicast1, @broadcast, @initdev={0xac, 0x1e, 0x0, 0x0}, @broadcast, @multicast2]}, @ssrr={0x89, 0xb, 0x9, [@multicast1, @local]}, @ssrr={0x89, 0x13, 0x3e, [@multicast2, @empty, @dev={0xac, 0x14, 0x14, 0x42}, @loopback]}, @rr={0x7, 0xb, 0x78, [@multicast1, @local]}, @ra={0x94, 0x4}]}}}}})
ioctl$sock_inet_SIOCSARP(r0, 0x8955, &(0x7f00000003c0)={{0x2, 0x4e24, @initdev={0xac, 0x1e, 0x0, 0x0}}, {0x306, @multicast}, 0x14, {0x2, 0x4e21, @initdev={0xac, 0x1e, 0x0, 0x0}}, 'team0\x00'}) (async)
unshare(0x62040200) (async)
mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x3, 0x8031, 0xffffffffffffffff, 0x0) (async)
r7 = socket$netlink(0x10, 0x3, 0x9)
sendmsg$NFT_BATCH(r7, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000a40)={{0x14, 0x3eb}, [@NFT_MSG_NEWCHAIN={0x14, 0x3, 0xa, 0x305, 0x0, 0x0, {0x5, 0x0, 0xa}}], {0x14, 0x3f5}}, 0x3c}, 0x1, 0x0, 0x0, 0x4c0d4}, 0x0) (async)
r8 = socket$inet6_udp(0xa, 0x2, 0x0)
setsockopt$SO_VM_SOCKETS_BUFFER_MIN_SIZE(r3, 0x28, 0x1, &(0x7f0000000180)=0x1, 0x8) (async)
setsockopt$IP6T_SO_SET_REPLACE(r8, 0x29, 0x40, &(0x7f0000000a00)=@raw={'raw\x00', 0x3c1, 0x1a6cc7, 0x390, 0x1d0, 0x5802, 0x294, 0x0, 0x294, 0x310, 0x378, 0x378, 0x310, 0x378, 0x3, 0x0, {[{{@ipv6={@mcast2, @ipv4={'\x00', '\xff\xff', @private=0xa010101}, [0xffffff00, 0xff, 0xff000000, 0xff000000], [0xff, 0xff, 0xff, 0xff000000], 'veth0_to_hsr\x00', 'vlan0\x00', {0xff}, {0xff}, 0x0, 0x0, 0x2, 0x80}, 0x0, 0xa8, 0x1d0, 0x52020000}, @common=@unspec=@SECMARK={0x128, 'SECMARK\x00', 0x0, {0x1, 0xe5f6, 'system_u:object_r:etc_aliases_t:s0\x00'}}}, {{@ipv6={@loopback, @remote, [], [0x0, 0x0, 0x0, 0xffffffff], 'ip6erspan0\x00', 'gre0\x00', {0xff}, {}, 0x0, 0x81}, 0x0, 0xa8, 0xf0}, @unspec=@CT0={0x48, 'CT\x00', 0x0, {0x1, 0x3, 0x1, 0x0, 'netbios-ns\x00', {0x5}}}}], {{'\x00', 0x0, 0xa8, 0xd0}, {0x28}}}}, 0x3f0)
getsockopt$ARPT_SO_GET_ENTRIES(0xffffffffffffffff, 0x0, 0x61, &(0x7f0000000000)=ANY=[@ANYBLOB='fi'], &(0x7f0000000100)=0x28)
mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x2, 0x22051, r3, 0x0)

0s ago: executing program 0 (id=3020):
r0 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10)
socket$inet6_icmp(0xa, 0x2, 0x3a)
r1 = bpf$MAP_CREATE(0x0, &(0x7f0000000340)=ANY=[@ANYBLOB="0500000004000000090000000800000000000000", @ANYRES32, @ANYBLOB="0000000000000000000000000000000000000000ce2f360e5a5729b7d347203d782c5cc3abd98770cdce3ecdc24dee015ff4d053f8308e3c0c7def18effa25704d85447be391c3aa4221a2d42ae911c30cf84e752ec4ae117dbd829e96f2b8bbfc3cfe41c88a45e231ad", @ANYRES32=0x0, @ANYRES32, @ANYBLOB='\x00'/28], 0x50)
close(0x3)
bpf$MAP_CREATE(0x0, &(0x7f0000001200)=@base={0x2, 0x4, 0x5, 0x143, 0x1014}, 0x50)
r2 = bpf$PROG_LOAD(0x5, &(0x7f00000004c0)={0x11, 0x14, &(0x7f0000000580)=ANY=[@ANYBLOB="1802000008000000000000000000000018010000786c6c2500000000070000007b1af8ff00000000bfa100000000000007010000f8ffffffb700000000000000b7030000000000fd850000002d00000018110000", @ANYRES32=r1, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000000100000095"], &(0x7f0000000100)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94)
bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000480)={&(0x7f0000000680)='sys_exit\x00', r2}, 0x10) (async)
bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000480)={&(0x7f0000000680)='sys_exit\x00', r2}, 0x10)
r3 = syz_open_procfs$namespace(0xffffffffffffffff, &(0x7f0000000000)='ns/pid\x00')
socket$nl_route(0x10, 0x3, 0x0) (async)
r4 = socket$nl_route(0x10, 0x3, 0x0)
socket$inet_udp(0x2, 0x2, 0x0) (async)
r5 = socket$inet_udp(0x2, 0x2, 0x0)
ioctl$sock_SIOCGIFINDEX(r5, 0x8933, &(0x7f00000004c0)={'bond0\x00'}) (async)
ioctl$sock_SIOCGIFINDEX(r5, 0x8933, &(0x7f00000004c0)={'bond0\x00', <r6=>0x0})
syz_genetlink_get_family_id$batadv(&(0x7f0000000400), 0xffffffffffffffff) (async)
r7 = syz_genetlink_get_family_id$batadv(&(0x7f0000000400), 0xffffffffffffffff)
sendmsg$BATADV_CMD_GET_BLA_CLAIM(r3, &(0x7f0000000700)={&(0x7f0000000280)={0x10, 0x0, 0x0, 0x20}, 0xc, &(0x7f00000006c0)={&(0x7f0000000640)={0x24, r7, 0x2, 0x70bd2a, 0x25dfdbff, {}, [@BATADV_ATTR_MESH_IFINDEX={0x8, 0x3, r6}, @BATADV_ATTR_THROUGHPUT_OVERRIDE={0x8, 0x3b, 0x6}]}, 0x24}, 0x1, 0x0, 0x0, 0x10}, 0x4000004) (async)
sendmsg$BATADV_CMD_GET_BLA_CLAIM(r3, &(0x7f0000000700)={&(0x7f0000000280)={0x10, 0x0, 0x0, 0x20}, 0xc, &(0x7f00000006c0)={&(0x7f0000000640)={0x24, r7, 0x2, 0x70bd2a, 0x25dfdbff, {}, [@BATADV_ATTR_MESH_IFINDEX={0x8, 0x3, r6}, @BATADV_ATTR_THROUGHPUT_OVERRIDE={0x8, 0x3b, 0x6}]}, 0x24}, 0x1, 0x0, 0x0, 0x10}, 0x4000004)
sendmsg$nl_route(r4, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000000)=@newlink={0x3c, 0x10, 0x1, 0x70bd25, 0x25dfdbfa, {0x0, 0x0, 0x0, r6, 0x8013, 0x1922b}, [@IFLA_LINKINFO={0x1c, 0x12, 0x0, 0x1, @bond={{0x9}, {0xc, 0x2, 0x0, 0x1, [@IFLA_BOND_RESEND_IGMP={0x8, 0xf, 0x1000}]}}}]}, 0x3c}, 0x1, 0x0, 0x0, 0x40000}, 0x4000)
setsockopt$inet_sctp6_SCTP_ADAPTATION_LAYER(0xffffffffffffffff, 0x84, 0x7, &(0x7f0000000000)={0xc}, 0x62) (async)
setsockopt$inet_sctp6_SCTP_ADAPTATION_LAYER(0xffffffffffffffff, 0x84, 0x7, &(0x7f0000000000)={0xc}, 0x62)
bpf$BPF_BTF_LOAD(0x12, &(0x7f00000000c0)={0x0, 0x0, 0x0, 0x0, 0x1}, 0x28) (async)
bpf$BPF_BTF_LOAD(0x12, &(0x7f00000000c0)={0x0, 0x0, 0x0, 0x0, 0x1}, 0x28)
socket$nl_generic(0x10, 0x3, 0x10)
r8 = socket(0x10, 0x2, 0x0)
ioctl$sock_ipv6_tunnel_SIOCADDTUNNEL(r8, 0x89f1, &(0x7f0000000100)={'ip6gre0\x00', &(0x7f00000009c0)={'syztnl1\x00', <r9=>0x0, 0x0, 0x0, 0x1, 0x2, 0x0, @rand_addr=' \x01\x00', @loopback, 0x0, 0x8000}})
ioctl$sock_ipv6_tunnel_SIOCCHGTUNNEL(r8, 0x89f3, &(0x7f0000000440)={'syztnl1\x00', &(0x7f00000002c0)={'ip6_vti0\x00', r9, 0x0, 0x0, 0x3, 0x0, 0x0, @ipv4={'\x00', '\xff\xff', @broadcast}, @rand_addr=' \x01\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x02', 0x0, 0x0, 0x0, 0x6}})
r10 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000480)='cgroup.controllers\x00', 0x275a, 0x0)
write$tun(r10, &(0x7f0000000000)=ANY=[], 0x38)
mmap(&(0x7f0000000000/0x3000)=nil, 0x3000, 0x1, 0x10012, r10, 0x0)
syz_init_net_socket$bt_l2cap(0x1f, 0x1, 0x0) (async)
syz_init_net_socket$bt_l2cap(0x1f, 0x1, 0x0)
r11 = syz_open_procfs$namespace(0x0, &(0x7f0000000140)='ns/pid_for_children\x00')
r12 = socket(0x15, 0x5, 0x0)
connect$l2tp6(r12, &(0x7f0000000740)={0xa, 0x0, 0x0, @empty}, 0x20) (async)
connect$l2tp6(r12, &(0x7f0000000740)={0xa, 0x0, 0x0, @empty}, 0x20)
mkdirat$cgroup(r11, &(0x7f0000000000)='syz0\x00', 0x1ff)
r13 = syz_genetlink_get_family_id$netlbl_unlabel(&(0x7f00000001c0), r0)
sendmsg$NLBL_UNLABEL_C_STATICREMOVEDEF(r0, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000200)=ANY=[@ANYBLOB='x\x00\x00\x00', @ANYRES16=r13, @ANYBLOB="01400010000600000000067400062c00070073797352656d5f753a6f626a6563745f723a756465765f68656c7065725f657865635f743a733000080002000000e6ff05000700263a3a0914000600626f6e64300000000000000001000000080003"], 0x78}, 0x1, 0xffffffff00000003}, 0x4)

kernel console output (not intermixed with test programs):

us mode
[  217.725376][T11849] netlink: 'syz.3.1538': attribute type 1 has an invalid length.
[  217.971800][T11863] __nla_validate_parse: 8 callbacks suppressed
[  217.971818][T11863] netlink: 12 bytes leftover after parsing attributes in process `syz.4.1544'.
[  217.990870][T11860] netlink: 60 bytes leftover after parsing attributes in process `syz.0.1542'.
[  218.040912][T11866] netlink: 256 bytes leftover after parsing attributes in process `syz.0.1542'.
[  218.080641][T11869] tipc: Enabled bearer <eth:syzkaller0>, priority 0
[  218.143643][T11878] netlink: 8 bytes leftover after parsing attributes in process `syz.4.1548'.
[  218.216345][T11869] syzkaller0: entered promiscuous mode
[  218.222209][T11869] syzkaller0: entered allmulticast mode
[  218.231480][T11869] tipc: Resetting bearer <eth:syzkaller0>
[  218.305294][T11868] tipc: Resetting bearer <eth:syzkaller0>
[  218.347181][ T5872] Bluetooth: hci4: command 0x0405 tx timeout
[  218.511520][T11897] netlink: 16 bytes leftover after parsing attributes in process `syz.2.1553'.
[  219.181536][ T9919] tipc: Node number set to 1090440025
[  219.731732][T11868] tipc: Disabling bearer <eth:syzkaller0>
[  219.777064][T11901] workqueue: Failed to create a rescuer kthread for wq "bond6": -EINTR
[  219.975688][T11912] netlink: 'syz.1.1556': attribute type 1 has an invalid length.
[  219.995501][T11912] netlink: 'syz.1.1556': attribute type 1 has an invalid length.
[  220.010684][T11919] A link change request failed with some changes committed already. Interface lo may have been left with an inconsistent configuration, please check.
[  220.070089][T11926] netlink: 212376 bytes leftover after parsing attributes in process `syz.4.1561'.
[  220.121798][T11929] openvswitch: netlink: Duplicate or invalid key (type 0).
[  220.153634][T11929] openvswitch: netlink: Flow actions may not be safe on all matching packets.
[  220.185272][T11929] netlink: 40 bytes leftover after parsing attributes in process `syz.1.1560'.
[  220.261095][   T49] nci: nci_rf_intf_activated_ntf_packet: unsupported activation_rf_tech_and_mode 0x7
[  220.725781][T11955] netlink: 'syz.4.1565': attribute type 5 has an invalid length.
[  220.735803][T11954] netlink: 'syz.1.1567': attribute type 4 has an invalid length.
[  220.767421][T11957] netlink: 8 bytes leftover after parsing attributes in process `syz.2.1566'.
[  220.790023][T11957] netlink: 4 bytes leftover after parsing attributes in process `syz.2.1566'.
[  220.895813][T11959] netlink: 8 bytes leftover after parsing attributes in process `syz.4.1568'.
[  220.935884][T11961] vlan5: entered promiscuous mode
[  220.978314][T11964] netlink: 'syz.1.1571': attribute type 5 has an invalid length.
[  221.022406][T11969] tipc: Enabled bearer <eth:syzkaller0>, priority 0
[  221.103454][T11968] tipc: Disabling bearer <eth:syzkaller0>
[  221.469903][T11996] netlink: 'syz.3.1581': attribute type 10 has an invalid length.
[  221.806356][T12016] netlink: 'syz.4.1585': attribute type 1 has an invalid length.
[  221.980250][T12027] RDS: rds_bind could not find a transport for ::ffff:172.20.20.170, load rds_tcp or rds_rdma?
[  222.006500][T12016] 8021q: adding VLAN 0 to HW filter on device bond5
[  222.074717][T12020] bond5: (slave wlan0): Enslaving as an active interface with a down link
[  222.989795][ T5872] Bluetooth: hci4: command 0x0405 tx timeout
[  223.083145][T12069] __nla_validate_parse: 2 callbacks suppressed
[  223.083163][T12069] netlink: 16178 bytes leftover after parsing attributes in process `syz.2.1599'.
[  223.188984][T12074] netlink: 19 bytes leftover after parsing attributes in process `syz.3.1601'.
[  223.200483][T12068] 8021q: adding VLAN 0 to HW filter on device bond0
[  223.219648][T12068] A link change request failed with some changes committed already. Interface bond0 may have been left with an inconsistent configuration, please check.
[  223.221695][T12076] netlink: 'syz.4.1603': attribute type 31 has an invalid length.
[  223.263986][T12071] vlan5: entered promiscuous mode
[  223.269474][T12071] gretap0: entered promiscuous mode
[  223.366053][T12079] netlink: 68 bytes leftover after parsing attributes in process `syz.4.1604'.
[  223.379943][T12079] netlink: 'syz.4.1604': attribute type 1 has an invalid length.
[  223.451202][T12084] netlink: 'syz.3.1607': attribute type 1 has an invalid length.
[  223.583716][T12084] bond7: entered promiscuous mode
[  223.591741][T12084] 8021q: adding VLAN 0 to HW filter on device bond7
[  223.600309][T12100] netlink: 24 bytes leftover after parsing attributes in process `syz.4.1611'.
[  223.603731][T12098] netlink: 24 bytes leftover after parsing attributes in process `syz.4.1611'.
[  223.635968][T12095] 8021q: adding VLAN 0 to HW filter on device bond7
[  223.647418][T12095] bond7: (slave wireguard0): The slave device specified does not support setting the MAC address
[  223.653625][   T30] audit: type=1800 audit(1756757060.930:3): pid=12108 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed(directio) comm="syz.1.1610" name="blkio.bfq.time_recursive" dev="tmpfs" ino=1676 res=0 errno=0
[  223.661614][T12095] bond7: (slave wireguard0): Setting fail_over_mac to active for active-backup mode
[  223.690227][T12084] IPv6: RTM_NEWROUTE with no NLM_F_CREATE or NLM_F_REPLACE
[  223.690322][T12084] IPv6: NLM_F_CREATE should be set when creating new route
[  223.690347][T12084] IPv6: NLM_F_CREATE should be set when creating new route
[  223.690866][T12084] IPv6: RTM_NEWROUTE with no NLM_F_CREATE or NLM_F_REPLACE
[  223.726206][T12113] llcp: llcp_sock_recvmsg: Recv datagram failed state 4 -11 0
[  223.729877][T12095] bond7: (slave wireguard0): making interface the new active one
[  223.745657][T12095] wireguard0: entered promiscuous mode
[  223.752674][T12095] bond7: (slave wireguard0): Enslaving as an active interface with an up link
[  223.762475][T12102] netlink: 24 bytes leftover after parsing attributes in process `syz.2.1613'.
[  223.771562][T12102] netlink: 24 bytes leftover after parsing attributes in process `syz.2.1613'.
[  223.792289][T12109] netlink: 24 bytes leftover after parsing attributes in process `syz.2.1613'.
[  223.801714][T12109] netlink: 24 bytes leftover after parsing attributes in process `syz.2.1613'.
[  223.828419][T12084] bond7: (slave wireguard1): The slave device specified does not support setting the MAC address
[  223.858151][T12084] bond7: (slave wireguard1): Enslaving as a backup interface with an up link
[  223.892717][T12117] pim6reg1: entered allmulticast mode
[  224.119948][T12129] netlink: 'syz.3.1617': attribute type 10 has an invalid length.
[  224.181164][T12138] netlink: 'syz.3.1617': attribute type 10 has an invalid length.
[  224.201444][T12129] bond0: (slave 
0!
): Releasing backup interface
[  224.306034][T12129] !
: left promiscuous mode
[  224.342798][T12129] !
: left allmulticast mode
[  224.436536][T12147] netlink: 'syz.0.1620': attribute type 10 has an invalid length.
[  224.449785][T12147] netlink: 40 bytes leftover after parsing attributes in process `syz.0.1620'.
[  224.456497][T12129] !
: entered allmulticast mode
[  224.472756][T12129] team0: Failed to send port change of device 
0!
 via netlink (err -105)
[  224.497838][T12129] team0: Failed to send options change via netlink (err -105)
[  224.557209][T12129] team0: Port device 
0!
 added
[  224.613670][T12138] team0: Failed to send port change of device 
0!
 via netlink (err -105)
[  224.657185][T12138] !
: left allmulticast mode
[  224.670788][T12138] team0: Failed to send options change via netlink (err -105)
[  224.682460][T12138] team0: Failed to send port change of device 
0!
 via netlink (err -105)
[  224.692137][T12138] team0: Port device 
0!
 removed
[  224.702232][T12138] !
: entered promiscuous mode
[  224.707270][T12138] !
: entered allmulticast mode
[  224.713290][T12138] bond0: (slave 
0!
): Enslaving as an active interface with an up link
[  224.723120][T12147] batadv0: entered promiscuous mode
[  224.732016][T12147] batadv0: entered allmulticast mode
[  224.737970][T12147] A link change request failed with some changes committed already. Interface batadv0 may have been left with an inconsistent configuration, please check.
[  224.775002][ T3457] netdevsim netdevsim3 eth0: set [0, 0] type 1 family 0 port 8472 - 0
[  224.804346][ T3457] netdevsim netdevsim3 eth1: set [0, 0] type 1 family 0 port 8472 - 0
[  224.818462][ T3457] netdevsim netdevsim3 eth2: set [0, 0] type 1 family 0 port 8472 - 0
[  224.856011][ T3457] netdevsim netdevsim3 eth3: set [0, 0] type 1 family 0 port 8472 - 0
[  225.039649][T12169] x_tables: ip_tables: HMARK.0 target: invalid size 64 (kernel) != (user) 72
[  225.281599][T12189] netlink: 'syz.3.1630': attribute type 1 has an invalid length.
[  225.616401][T12209] team0: entered promiscuous mode
[  225.621959][T12209] team_slave_0: entered promiscuous mode
[  225.640028][T12209] team_slave_1: entered promiscuous mode
[  225.938695][T12227] netlink: 'syz.3.1636': attribute type 1 has an invalid length.
[  226.002210][T12208] team0 (unregistering): left promiscuous mode
[  226.008852][T12208] team_slave_0: left promiscuous mode
[  226.014504][T12208] team_slave_1: left promiscuous mode
[  226.027864][T12208] team0 (unregistering): Port device team_slave_0 removed
[  226.036570][T12208] team0 (unregistering): Port device team_slave_1 removed
[  226.208658][T12229] netlink: 'syz.4.1638': attribute type 6 has an invalid length.
[  226.282565][T12229] bond6: entered promiscuous mode
[  226.324645][T12231] A link change request failed with some changes committed already. Interface bond_slave_0 may have been left with an inconsistent configuration, please check.
[  226.366970][T12234] A link change request failed with some changes committed already. Interface bond_slave_0 may have been left with an inconsistent configuration, please check.
[  226.866701][T12267] sctp: [Deprecated]: syz.3.1650 (pid 12267) Use of int in maxseg socket option.
[  226.866701][T12267] Use struct sctp_assoc_value instead
[  226.954906][T12271] A link change request failed with some changes committed already. Interface macvlan1 may have been left with an inconsistent configuration, please check.
[  227.300819][T12298] netlink: 'syz.2.1656': attribute type 4 has an invalid length.
[  227.340015][T12298] A link change request failed with some changes committed already. Interface bond0 may have been left with an inconsistent configuration, please check.
[  227.406382][T12301] _ÐZ`Ô€@ÿÿ: entered promiscuous mode
[  227.890932][T12328] 8021q: adding VLAN 0 to HW filter on device team0
[  227.917762][T12328] bond0: (slave team0): Enslaving as an active interface with an up link
[  227.956352][T12330] bond0: (slave syz_tun): Enslaving as an active interface with an up link
[  228.122227][T12328] __nla_validate_parse: 19 callbacks suppressed
[  228.122246][T12328] netlink: 40 bytes leftover after parsing attributes in process `syz.2.1668'.
[  228.207777][T12339] netlink: 12 bytes leftover after parsing attributes in process `syz.3.1670'.
[  228.325075][T12346] netlink: 8 bytes leftover after parsing attributes in process `syz.4.1671'.
[  228.481294][T12356] netlink: 24 bytes leftover after parsing attributes in process `syz.3.1674'.
[  228.524906][T12346] gtp0: entered promiscuous mode
[  228.533000][T12346] gtp0: entered allmulticast mode
[  228.875295][T12376] netlink: 16 bytes leftover after parsing attributes in process `syz.2.1681'.
[  229.224030][T12400] netlink: 8 bytes leftover after parsing attributes in process `syz.4.1687'.
[  229.233491][T12400] netlink: 4 bytes leftover after parsing attributes in process `syz.4.1687'.
[  229.253859][T12400] validate_nla: 3 callbacks suppressed
[  229.253876][T12400] netlink: 'syz.4.1687': attribute type 11 has an invalid length.
[  229.350418][T12411] netlink: 'syz.3.1689': attribute type 1 has an invalid length.
[  229.361915][T12411] netlink: 228 bytes leftover after parsing attributes in process `syz.3.1689'.
[  229.530720][T12425] netlink: 8 bytes leftover after parsing attributes in process `syz.1.1691'.
[  229.547073][T12425] netlink: 120 bytes leftover after parsing attributes in process `syz.1.1691'.
[  229.644546][T12428] bond0: option lp_interval: invalid value (0)
[  229.645180][T12417] netlink: 'syz.1.1691': attribute type 13 has an invalid length.
[  229.687118][T12428] bond0: option lp_interval: allowed values 1 - 2147483647
[  229.875676][T12417] mac80211_hwsim hwsim6 wlan0: left allmulticast mode
[  229.887958][T12417] mac80211_hwsim hwsim6 wlan0: left promiscuous mode
[  229.957411][T10113] netdevsim netdevsim1 eth0: unset [0, 0] type 1 family 0 port 8472 - 0
[  229.966935][T10113] netdevsim netdevsim1 eth1: unset [0, 0] type 1 family 0 port 8472 - 0
[  229.993081][T10113] netdevsim netdevsim1 eth2: unset [0, 0] type 1 family 0 port 8472 - 0
[  230.042247][T10113] netdevsim netdevsim1 eth3: unset [0, 0] type 1 family 0 port 8472 - 0
[  231.025339][T12499] netlink: 'syz.0.1710': attribute type 7 has an invalid length.
[  231.036129][T12499] netlink: 'syz.0.1710': attribute type 8 has an invalid length.
[  231.596870][T12533] vlan0: entered promiscuous mode
[  231.622777][T12534] sctp: [Deprecated]: syz.0.1718 (pid 12534) Use of int in maxseg socket option.
[  231.622777][T12534] Use struct sctp_assoc_value instead
[  232.139974][T12555] 8021q: adding VLAN 0 to HW filter on device bond6
[  232.190377][T12558] 8021q: adding VLAN 0 to HW filter on device bond6
[  232.198405][T12558] bond6: (slave vxcan3): The slave device specified does not support setting the MAC address
[  232.213831][T12558] bond6: (slave vxcan3): Error -95 calling set_mac_address
[  232.914827][T12592] ieee802154 phy0 wpan0: encryption failed: -90
[  233.151761][T12601] __nla_validate_parse: 11 callbacks suppressed
[  233.151780][T12601] netlink: 96 bytes leftover after parsing attributes in process `syz.1.1736'.
[  233.302727][T12610] netlink: 4 bytes leftover after parsing attributes in process `syz.3.1738'.
[  233.644305][T12634] netlink: 4 bytes leftover after parsing attributes in process `syz.3.1745'.
[  233.939597][T12643] syz_tun: entered allmulticast mode
[  233.981739][T12649] dvmrp8: entered allmulticast mode
[  233.988003][T12638] netlink: 'syz.1.1748': attribute type 23 has an invalid length.
[  234.001539][T12649] syz_tun: left allmulticast mode
[  234.006712][T12649] dvmrp8: left allmulticast mode
[  234.724524][T12690] netlink: 'syz.3.1760': attribute type 10 has an invalid length.
[  234.771735][T12690] batadv_slave_0: entered promiscuous mode
[  234.781787][T12694] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium
[  234.790426][T12690] batadv_slave_0: entered allmulticast mode
[  234.809430][T12690] bond0: (slave batadv_slave_0): Enslaving as an active interface with an up link
[  234.963930][T12702] netlink: 28 bytes leftover after parsing attributes in process `syz.4.1765'.
[  235.198464][T12718] tipc: Enabled bearer <ib:ip6gre0>, priority 10
[  235.280435][T12726] sctp: [Deprecated]: syz.0.1771 (pid 12726) Use of struct sctp_assoc_value in delayed_ack socket option.
[  235.280435][T12726] Use struct sctp_sack_info instead
[  235.407882][T12733] netlink: 12 bytes leftover after parsing attributes in process `syz.2.1773'.
[  236.028238][T12736] netlink: 8 bytes leftover after parsing attributes in process `syz.0.1774'.
[  236.054194][T12736] netlink: 'syz.0.1774': attribute type 13 has an invalid length.
[  236.074255][T12736] netlink: 'syz.0.1774': attribute type 17 has an invalid length.
[  236.122102][T12768] workqueue: Failed to create a rescuer kthread for wq "nfc2_nci_rx_wq": -EINTR
[  236.155175][T12736] batadv0: left promiscuous mode
[  236.173048][T12736] batadv0: left allmulticast mode
[  236.178657][T12775] netlink: 12 bytes leftover after parsing attributes in process `syz.3.1782'.
[  236.262407][T12778] netlink: 8 bytes leftover after parsing attributes in process `syz.2.1784'.
[  236.892938][T12800] Bluetooth: MGMT ver 1.23
[  236.907872][T12800] geneve2: entered promiscuous mode
[  236.917635][ T3457] netdevsim netdevsim1 eth0: set [1, 0] type 2 family 0 port 6081 - 0
[  236.920211][T12800] netlink: 4 bytes leftover after parsing attributes in process `syz.1.1790'.
[  236.948651][ T3457] netdevsim netdevsim1 eth1: set [1, 0] type 2 family 0 port 6081 - 0
[  236.966688][ T3457] netdevsim netdevsim1 eth2: set [1, 0] type 2 family 0 port 6081 - 0
[  236.995500][ T3457] netdevsim netdevsim1 eth3: set [1, 0] type 2 family 0 port 6081 - 0
[  237.271335][T12815] nbd2: detected capacity change from 0 to 127
[  237.423559][T12832] syzkaller0: entered promiscuous mode
[  237.431254][T12832] syzkaller0: entered allmulticast mode
[  237.440146][T12831] tipc: Enabled bearer <eth:syzkaller0>, priority 0
[  237.512428][T12839] netlink: 'syz.1.1796': attribute type 3 has an invalid length.
[  237.522949][T12839] netlink: 132 bytes leftover after parsing attributes in process `syz.1.1796'.
[  237.544507][T12831] tipc: Resetting bearer <eth:syzkaller0>
[  237.569764][T12831] tipc: Disabling bearer <eth:syzkaller0>
[  237.589389][ T5884] block nbd2: Receive control failed (result -32)
[  238.034880][T12862] dvmrp8: entered allmulticast mode
[  238.043657][T12861] dvmrp8: left allmulticast mode
[  238.336133][T12897] netlink: 'syz.3.1809': attribute type 64 has an invalid length.
[  238.584803][T12910] __nla_validate_parse: 3 callbacks suppressed
[  238.584820][T12910] netlink: 24 bytes leftover after parsing attributes in process `syz.1.1814'.
[  238.850333][T12923] tipc: Bearer <udp:syz1>: already 2 bearers with priority 10
[  238.917749][T12923] tipc: Bearer <udp:syz1>: trying with adjusted priority
[  238.925061][T12927] netlink: 'syz.4.1818': attribute type 10 has an invalid length.
[  238.925072][T12923] tipc: Enabling of bearer <udp:syz1> rejected, failed to enable media
[  239.117892][T12934] netlink: 60 bytes leftover after parsing attributes in process `syz.0.1821'.
[  239.207686][T12941] netlink: 'syz.1.1823': attribute type 2 has an invalid length.
[  239.232552][T12941] netlink: 'syz.1.1823': attribute type 1 has an invalid length.
[  239.252657][T12941] netlink: 'syz.1.1823': attribute type 1 has an invalid length.
[  239.312890][T12921] infiniband syz2: set down
[  239.317745][T12921] infiniband syz2: added bond_slave_0
[  239.412099][T12948] netlink: 8 bytes leftover after parsing attributes in process `syz.1.1826'.
[  239.482295][T12921] RDS/IB: syz2: added
[  239.500649][T12921] smc: adding ib device syz2 with port count 1
[  239.507278][T12921] smc:    ib device syz2 port 1 has pnetid 
[  239.631733][T12959] syzkaller0: entered promiscuous mode
[  239.643712][T12959] syzkaller0: entered allmulticast mode
[  239.663159][T12960] netlink: 224 bytes leftover after parsing attributes in process `syz.0.1827'.
[  239.890263][T12959] netlink: 16 bytes leftover after parsing attributes in process `syz.1.1829'.
[  239.925389][T12969] netlink: 'syz.0.1831': attribute type 1 has an invalid length.
[  239.985297][T12969] netlink: 'syz.0.1831': attribute type 1 has an invalid length.
[  240.169687][T12984] netlink: 24 bytes leftover after parsing attributes in process `syz.1.1835'.
[  240.778571][T13000] netlink: 8 bytes leftover after parsing attributes in process `syz.3.1838'.
[  240.872269][T13002] 8021q: adding VLAN 0 to HW filter on device bond7
[  240.963214][T13005] ipvlan0: entered promiscuous mode
[  241.680905][T13028] netlink: 8 bytes leftover after parsing attributes in process `syz.1.1845'.
[  242.343649][T13041] netlink: 8 bytes leftover after parsing attributes in process `syz.1.1849'.
[  242.356844][T13041] netlink: 4 bytes leftover after parsing attributes in process `syz.1.1849'.
[  243.367517][T13062] tipc: Enabled bearer <eth:syzkaller0>, priority 0
[  243.382207][T13062] syzkaller0: entered promiscuous mode
[  243.425119][T13062] syzkaller0: entered allmulticast mode
[  243.490969][T13062] tipc: Resetting bearer <eth:syzkaller0>
[  243.512317][T13061] tipc: Resetting bearer <eth:syzkaller0>
[  243.562337][T13061] tipc: Disabling bearer <eth:syzkaller0>
[  243.964321][T13090] __nla_validate_parse: 1 callbacks suppressed
[  243.964339][T13090] netlink: 4 bytes leftover after parsing attributes in process `syz.3.1862'.
[  244.009275][T13090] macvtap1: entered promiscuous mode
[  244.027742][T13090] veth0: entered promiscuous mode
[  244.039365][T13090] macvtap1: entered allmulticast mode
[  244.044775][T13090] veth0: entered allmulticast mode
[  244.049154][T13093] netlink: 4 bytes leftover after parsing attributes in process `syz.3.1862'.
[  244.086339][T13097] netlink: 'syz.0.1865': attribute type 1 has an invalid length.
[  244.094887][T13097] netlink: 4 bytes leftover after parsing attributes in process `syz.0.1865'.
[  244.206702][T13110] netlink: 48 bytes leftover after parsing attributes in process `syz.3.1868'.
[  244.221701][T13110] sit0: entered promiscuous mode
[  244.229576][T13110] netlink: 'syz.3.1868': attribute type 1 has an invalid length.
[  244.244166][T13110] netlink: 1 bytes leftover after parsing attributes in process `syz.3.1868'.
[  244.982671][T13134] netlink: 8 bytes leftover after parsing attributes in process `syz.3.1875'.
[  245.170319][T13145] netlink: 56 bytes leftover after parsing attributes in process `syz.3.1881'.
[  245.179890][T13143] netlink: 28 bytes leftover after parsing attributes in process `syz.2.1882'.
[  245.200004][T13143] netlink: 28 bytes leftover after parsing attributes in process `syz.2.1882'.
[  246.064195][T13184] netlink: 12 bytes leftover after parsing attributes in process `syz.2.1889'.
[  246.414953][T13198] ieee802154 phy0 wpan0: encryption failed: -22
[  246.427056][ T5884] Bluetooth: hci4: command 0x0405 tx timeout
[  246.499835][T13191] tipc: Enabling of bearer <eth:syzkaller0> rejected, failed to enable media
[  246.509459][T13200] netlink: 'syz.4.1894': attribute type 4 has an invalid length.
[  247.791697][T13256] sctp: [Deprecated]: syz.3.1909 (pid 13256) Use of struct sctp_assoc_value in delayed_ack socket option.
[  247.791697][T13256] Use struct sctp_sack_info instead
[  248.080036][T13266] bond0: (slave 
0!
): Releasing backup interface
[  248.087640][T13266] !
: left promiscuous mode
[  248.092295][T13266] !
: left allmulticast mode
[  248.099522][T13266] veth0_to_bond: left allmulticast mode
[  248.105085][T13266] veth0_to_bond: left promiscuous mode
[  248.121103][T13266] bridge6: port 2(veth0_to_bond) entered disabled state
[  248.142999][T13266] bond0: (slave batadv_slave_0): Releasing backup interface
[  248.151800][T13266] batadv_slave_0: left promiscuous mode
[  248.158110][T13266] batadv_slave_0: left allmulticast mode
[  248.166235][T13266] bond0: (slave wlan1): Releasing backup interface
[  248.174084][T13266] mac80211_hwsim hwsim3 wlan1: left promiscuous mode
[  248.181367][T13266] mac80211_hwsim hwsim3 wlan1: left allmulticast mode
[  248.189670][T13266] batman_adv: batadv0: Removing interface: ip6gretap1
[  248.199849][T13266] macvlan2: left allmulticast mode
[  248.205027][T13266] macvlan2: left promiscuous mode
[  248.210762][T13266] bridge1: port 1(macvlan2) entered disabled state
[  248.223158][T13266] veth9: left allmulticast mode
[  248.228537][T13266] veth9: left promiscuous mode
[  248.233678][T13266] bridge6: port 1(veth9) entered disabled state
[  248.244145][T13266] vlan4: left promiscuous mode
[  248.255456][T13266] veth1: left promiscuous mode
[  248.260893][T13266] bridge6: port 3(vlan4) entered disabled state
[  248.276037][T13266] bond7: (slave wireguard0): Releasing backup interface
[  248.291157][T13266] wireguard0: left promiscuous mode
[  248.298906][T13266] bond7: (slave wireguard1): making interface the new active one
[  248.313320][T13266] wireguard1: entered promiscuous mode
[  248.331042][T13266] bond7: (slave wireguard1): Releasing backup interface
[  248.346033][T13266] wireguard1: left promiscuous mode
[  248.634821][T13279] 8021q: adding VLAN 0 to HW filter on device bond7
[  248.767518][T13268] netlink: 'syz.2.1912': attribute type 13 has an invalid length.
[  248.783925][T13268] netlink: 'syz.2.1912': attribute type 17 has an invalid length.
[  248.857805][T13288] netlink: 'syz.4.1917': attribute type 30 has an invalid length.
[  248.865996][T13288] (unnamed net_device) (uninitialized): option arp_missed_max: mode dependency failed, not supported in mode 802.3ad(4)
[  249.195004][T13268] ip6gretap0: left promiscuous mode
[  249.222129][T13268] ip6gretap0: left allmulticast mode
[  249.363139][T13268] 8021q: adding VLAN 0 to HW filter on device bond0
[  249.623521][T13268] A link change request failed with some changes committed already. Interface caif0 may have been left with an inconsistent configuration, please check.
[  249.882747][T13330] __nla_validate_parse: 10 callbacks suppressed
[  249.882764][T13330] netlink: 4 bytes leftover after parsing attributes in process `syz.0.1930'.
[  250.026545][T13337] netlink: 12 bytes leftover after parsing attributes in process `syz.1.1931'.
[  250.045556][T13340] netlink: 'syz.4.1932': attribute type 13 has an invalid length.
[  250.053721][T13337] netlink: 'syz.1.1931': attribute type 2 has an invalid length.
[  250.425509][T13352] netlink: 'syz.3.1936': attribute type 2 has an invalid length.
[  250.471229][T13363] openvswitch: netlink: Flow actions may not be safe on all matching packets.
[  250.523897][T13361] netlink: 4 bytes leftover after parsing attributes in process `syz.1.1938'.
[  250.563717][T13361] netlink: 'syz.1.1938': attribute type 49 has an invalid length.
[  250.825474][T13381] bond0: (slave ipvlan3): enslaved VLAN challenged slave. Adding VLANs will be blocked as long as it is part of bond.
[  250.856933][T13381] bond0: (slave ipvlan3): The slave device specified does not support setting the MAC address
[  250.894521][T13381] bond0: (slave ipvlan3): Error -95 calling set_mac_address
[  251.575850][T13409] netlink: 68 bytes leftover after parsing attributes in process `syz.4.1950'.
[  251.612156][T13409] netlink: 'syz.4.1950': attribute type 10 has an invalid length.
[  251.683480][T13409] 8021q: adding VLAN 0 to HW filter on device bond0
[  251.704538][T13409] bond0: entered promiscuous mode
[  251.746831][T13409] mac80211_hwsim hwsim11 wlan1: entered promiscuous mode
[  251.754950][T13409] team0: Port device bond0 added
[  252.156766][T13438] ICMPv6: Received fragmented ndisc packet. Carefully consider disabling suppress_frag_ndisc.
[  252.159771][T13442] netlink: 'syz.4.1958': attribute type 1 has an invalid length.
[  252.178643][ T3457] nci: nci_rsp_packet: unsupported rsp opcode 0xf02
[  252.189439][T13443] vlan2: entered promiscuous mode
[  252.195603][T13443] bond0: entered promiscuous mode
[  252.201239][T13443] bond_slave_0: entered promiscuous mode
[  252.207157][T13443] bond_slave_1: entered promiscuous mode
[  252.230312][T13450] netlink: 12 bytes leftover after parsing attributes in process `syz.1.1956'.
[  252.263456][T13442] 8021q: adding VLAN 0 to HW filter on device bond8
[  252.288774][T13452] bond8: entered promiscuous mode
[  252.303904][T13450] bridge5: entered promiscuous mode
[  252.311766][T13450] bridge5: entered allmulticast mode
[  252.366312][T13447] netlink: 8 bytes leftover after parsing attributes in process `syz.4.1958'.
[  252.378584][T13447] netlink: 24 bytes leftover after parsing attributes in process `syz.4.1958'.
[  252.647448][T13459] netlink: 8 bytes leftover after parsing attributes in process `syz.1.1960'.
[  252.656373][T13459] netlink: 16 bytes leftover after parsing attributes in process `syz.1.1960'.
[  252.667487][T13459] netlink: 4 bytes leftover after parsing attributes in process `syz.1.1960'.
[  253.043924][T13469] A link change request failed with some changes committed already. Interface lo may have been left with an inconsistent configuration, please check.
[  253.152395][T13464] syzkaller0: entered promiscuous mode
[  253.161359][T13464] syzkaller0: entered allmulticast mode
[  253.273676][T13483] netlink: 'syz.4.1968': attribute type 13 has an invalid length.
[  253.282349][T13483] netlink: 'syz.4.1968': attribute type 17 has an invalid length.
[  255.260591][T13483] 8021q: adding VLAN 0 to HW filter on device team0
[  255.273523][T13483] A link change request failed with some changes committed already. Interface caif0 may have been left with an inconsistent configuration, please check.
[  255.297614][T13504] netlink: 'syz.1.1970': attribute type 10 has an invalid length.
[  255.372823][T13505] netlink: 'syz.1.1970': attribute type 10 has an invalid length.
[  255.399429][T13498] tipc: Enabling of bearer <udp:syz2> rejected, failed to enable media
[  255.432161][T13505] bond0: (slave dummy0): Enslaving as an active interface with an up link
[  255.455606][T13509] __nla_validate_parse: 1 callbacks suppressed
[  255.455623][T13509] netlink: 60 bytes leftover after parsing attributes in process `syz.2.1971'.
[  255.495946][T13512] netlink: 'syz.3.1973': attribute type 4 has an invalid length.
[  255.514258][T13512] netlink: 'syz.3.1973': attribute type 4 has an invalid length.
[  255.724165][ T1299] ieee802154 phy0 wpan0: encryption failed: -22
[  255.773119][T13526] bond0: entered promiscuous mode
[  255.779874][T13526] team0: entered promiscuous mode
[  255.791090][T13526] syz_tun: entered promiscuous mode
[  255.819534][T13526] bond0: left promiscuous mode
[  255.829941][T13526] team0: left promiscuous mode
[  255.834916][T13526] syz_tun: left promiscuous mode
[  256.213654][T13552] netlink: 8 bytes leftover after parsing attributes in process `syz.3.1981'.
[  256.239490][T13552] netlink: 8 bytes leftover after parsing attributes in process `syz.3.1981'.
[  256.309636][T13552] ip6tnl1: entered promiscuous mode
[  256.324089][T13552] ip6tnl1: entered allmulticast mode
[  256.576429][T13571] netlink: 'syz.0.1986': attribute type 1 has an invalid length.
[  256.795274][T13588] netlink: 16 bytes leftover after parsing attributes in process `syz.4.1989'.
[  256.968179][T13595] netlink: 4 bytes leftover after parsing attributes in process `syz.2.1991'.
[  257.023598][T13595] macvtap0: entered promiscuous mode
[  257.052878][T13595] batadv0: entered promiscuous mode
[  257.065599][T13595] macvtap0: entered allmulticast mode
[  257.077945][T13595] batadv0: entered allmulticast mode
[  257.085291][T13595] 8021q: adding VLAN 0 to HW filter on device macvtap0
[  257.636599][T13611] netlink: 20 bytes leftover after parsing attributes in process `syz.1.1996'.
[  257.748357][T13616] A link change request failed with some changes committed already. Interface wlan0 may have been left with an inconsistent configuration, please check.
[  257.790743][T13619] netlink: 8 bytes leftover after parsing attributes in process `syz.1.1999'.
[  257.854257][T13619] netlink: 8 bytes leftover after parsing attributes in process `syz.1.1999'.
[  257.923609][T13624] batadv1: entered allmulticast mode
[  257.989097][T13624] 8021q: adding VLAN 0 to HW filter on device batadv1
[  258.026917][ T9911] page_pool_release_retry() stalled pool shutdown: id 47, 3329 inflight 60 sec
[  258.082536][T13619] ip6tnl2: entered promiscuous mode
[  258.124615][T13619] ip6tnl2: entered allmulticast mode
[  258.534391][T13657] tipc: Enabled bearer <eth:syzkaller0>, priority 0
[  258.551861][T13657] syzkaller0: entered promiscuous mode
[  258.561283][T13657] syzkaller0: entered allmulticast mode
[  258.637473][T13656] tipc: Resetting bearer <eth:syzkaller0>
[  258.694320][T13656] tipc: Disabling bearer <eth:syzkaller0>
[  258.746605][T13663] netlink: 4 bytes leftover after parsing attributes in process `syz.1.2009'.
[  258.817472][T13647] netlink: 152 bytes leftover after parsing attributes in process `syz.3.2005'.
[  258.908252][T13670] netlink: 'syz.1.2011': attribute type 15 has an invalid length.
[  258.968068][T13664] netlink: 'syz.4.2008': attribute type 1 has an invalid length.
[  259.417614][T13687] openvswitch: netlink: Flow actions may not be safe on all matching packets.
[  259.538099][T13689] openvswitch: netlink: Flow actions may not be safe on all matching packets.
[  260.016407][T13717] netlink: 'syz.4.2027': attribute type 1 has an invalid length.
[  260.039121][T13717] netlink: 'syz.4.2027': attribute type 3 has an invalid length.
[  260.073362][T13717] NCSI netlink: No device for ifindex 246
[  260.668498][T13736] __nla_validate_parse: 5 callbacks suppressed
[  260.668518][T13736] netlink: 4 bytes leftover after parsing attributes in process `syz.0.2034'.
[  260.695657][T13736] netlink: 12 bytes leftover after parsing attributes in process `syz.0.2034'.
[  260.888923][T13744] netlink: 'syz.2.2037': attribute type 2 has an invalid length.
[  261.141378][T13754] gretap3: entered allmulticast mode
[  261.223652][T13761] netlink: 16 bytes leftover after parsing attributes in process `syz.3.2043'.
[  261.478615][T13770] netlink: del zone limit has 4 unknown bytes
[  261.596417][T13776] IPVS: set_ctl: invalid protocol: 47 172.30.1.3:20002
[  262.142531][T13791] netlink: 16 bytes leftover after parsing attributes in process `syz.2.2050'.
[  262.504561][T13805] netlink: 8 bytes leftover after parsing attributes in process `syz.2.2056'.
[  262.566955][T13805] netlink: 'syz.2.2056': attribute type 1 has an invalid length.
[  262.590756][T13805] netlink: 'syz.2.2056': attribute type 2 has an invalid length.
[  262.673000][T13811] netlink: 24 bytes leftover after parsing attributes in process `syz.1.2060'.
[  262.744032][T13824] netlink: 'syz.0.2061': attribute type 1 has an invalid length.
[  262.794829][T13824] 8021q: adding VLAN 0 to HW filter on device bond5
[  262.844579][T13828] veth7: entered promiscuous mode
[  262.855930][T13828] bond5: (slave veth7): Enslaving as an active interface with a down link
[  262.941812][T13824] erspan0: entered allmulticast mode
[  262.972643][T13824] bond5: (slave erspan0): making interface the new active one
[  262.984531][T13839] netlink: 40 bytes leftover after parsing attributes in process `syz.4.2067'.
[  262.990133][T13824] erspan0: entered promiscuous mode
[  263.004903][T13824] bond5: (slave erspan0): Enslaving as an active interface with an up link
[  263.014492][T13840] netlink: 4 bytes leftover after parsing attributes in process `syz.2.2066'.
[  263.033196][T13839] netlink: 'syz.4.2067': attribute type 17 has an invalid length.
[  263.085955][T13840] hsr_slave_1 (unregistering): left promiscuous mode
[  263.503388][T13875] bridge0: port 1(hsr_slave_0) entered blocking state
[  263.513086][T13875] bridge0: port 1(hsr_slave_0) entered disabled state
[  263.523502][T13875] hsr_slave_0: entered allmulticast mode
[  263.540587][T13875] hsr_slave_0: left allmulticast mode
[  263.674758][T13888] ip6gretap0: entered promiscuous mode
[  263.689412][T13888] macsec0: entered allmulticast mode
[  263.710116][T13888] ip6gretap0: entered allmulticast mode
[  263.767764][T13888] ip6gretap0: left allmulticast mode
[  263.787242][T13888] ip6gretap0: left promiscuous mode
[  263.972596][T13907] A link change request failed with some changes committed already. Interface lo may have been left with an inconsistent configuration, please check.
[  264.001243][T13907] veth0_to_team: entered promiscuous mode
[  264.007318][T13907] veth0_to_team: entered allmulticast mode
[  264.100404][T13916] dvmrp8: entered allmulticast mode
[  264.174758][T13925] netlink: 20 bytes leftover after parsing attributes in process `syz.0.2090'.
[  264.380114][T13932] netlink: 'syz.0.2094': attribute type 5 has an invalid length.
[  264.768881][T13912] dvmrp8: left allmulticast mode
[  264.826667][T13951] tipc: Enabled bearer <eth:syzkaller0>, priority 0
[  264.919879][T13947] syzkaller0: entered promiscuous mode
[  264.939193][T13947] syzkaller0: entered allmulticast mode
[  264.962160][T13953] bridge0: trying to set multicast startup query interval below minimum, setting to 100 (1000ms)
[  265.315226][T13982] netlink: 8 bytes leftover after parsing attributes in process `syz.0.2097'.
[  265.435553][T13947] tipc: Resetting bearer <eth:syzkaller0>
[  265.753169][T13941] tipc: Resetting bearer <eth:syzkaller0>
[  265.896162][T13941] tipc: Disabling bearer <eth:syzkaller0>
[  265.959250][T13997] netdevsim netdevsim3 eth3 (unregistering): unset [0, 0] type 1 family 0 port 8472 - 0
[  266.143865][T13997] netdevsim netdevsim3 eth2 (unregistering): unset [0, 0] type 1 family 0 port 8472 - 0
[  266.256209][T13997] netdevsim netdevsim3 eth1 (unregistering): unset [0, 0] type 1 family 0 port 8472 - 0
[  266.431109][T13997] netdevsim netdevsim3 eth0 (unregistering): unset [0, 0] type 1 family 0 port 8472 - 0
[  266.578729][T14006] macvlan3: entered allmulticast mode
[  266.584251][T14006] veth1_vlan: entered allmulticast mode
[  266.593809][T14006] veth1_vlan: left allmulticast mode
[  266.703387][ T3522] netdevsim netdevsim3 eth0: set [0, 0] type 1 family 0 port 8472 - 0
[  266.751159][ T3522] netdevsim netdevsim3 eth1: set [0, 0] type 1 family 0 port 8472 - 0
[  266.791889][   T12] netdevsim netdevsim3 eth2: set [0, 0] type 1 family 0 port 8472 - 0
[  266.811811][T14013] __nla_validate_parse: 1 callbacks suppressed
[  266.811827][T14013] netlink: 52 bytes leftover after parsing attributes in process `syz.4.2115'.
[  266.832239][   T12] netdevsim netdevsim3 eth3: set [0, 0] type 1 family 0 port 8472 - 0
[  267.020260][T14024] tipc: Enabling of bearer <eth:syzkaller0> rejected, failed to enable media
[  267.215061][T14037] netlink: 80 bytes leftover after parsing attributes in process `syz.3.2122'.
[  267.305589][T14042] macvlan3: entered allmulticast mode
[  267.336231][T14042] veth1_vlan: entered allmulticast mode
[  267.394015][T14042] veth1_vlan: left allmulticast mode
[  267.507817][T14062] tipc: Enabled bearer <eth:syzkaller0>, priority 0
[  267.533811][T14049] syzkaller0: entered promiscuous mode
[  267.543119][T14049] syzkaller0: entered allmulticast mode
[  267.570785][T14048] tipc: Resetting bearer <eth:syzkaller0>
[  267.618887][T14048] tipc: Disabling bearer <eth:syzkaller0>
[  267.893724][T14077] netlink: 8 bytes leftover after parsing attributes in process `syz.2.2133'.
[  267.899810][T14076] nbd: device at index 4 is going down
[  267.920062][T14077] netlink: 12 bytes leftover after parsing attributes in process `syz.2.2133'.
[  267.937401][T14074] netlink: 28 bytes leftover after parsing attributes in process `syz.4.2131'.
[  268.084153][T14082] bond6: entered promiscuous mode
[  268.090697][T14082] 8021q: adding VLAN 0 to HW filter on device bond6
[  268.568589][T14111] netlink: 40 bytes leftover after parsing attributes in process `syz.3.2143'.
[  268.821710][T14124] netlink: 13882 bytes leftover after parsing attributes in process `syz.3.2148'.
[  268.867643][T14123] netlink: 13882 bytes leftover after parsing attributes in process `syz.3.2148'.
[  268.916305][T14126] netlink: 20 bytes leftover after parsing attributes in process `syz.1.2149'.
[  268.931785][T14124] netlink: 13882 bytes leftover after parsing attributes in process `syz.3.2148'.
[  269.549883][T14156] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium
[  269.843615][T14175] (unnamed net_device) (uninitialized): option active_slave: mode dependency failed, not supported in mode balance-rr(0)
[  270.160927][T14196] netlink: 'syz.1.2168': attribute type 11 has an invalid length.
[  270.213159][T14196] netlink: 'syz.1.2168': attribute type 4 has an invalid length.
[  270.453601][T14200] syzkaller1: entered promiscuous mode
[  270.459334][T14200] syzkaller1: entered allmulticast mode
[  271.939949][T14271] __nla_validate_parse: 9 callbacks suppressed
[  271.939966][T14271] netlink: 8 bytes leftover after parsing attributes in process `syz.2.2184'.
[  271.977244][T14271] netlink: 16 bytes leftover after parsing attributes in process `syz.2.2184'.
[  272.036116][T14271] gtp0: entered promiscuous mode
[  272.339672][T14296] netlink: 28 bytes leftover after parsing attributes in process `syz.0.2192'.
[  272.493601][T14296] 8021q: adding VLAN 0 to HW filter on device macvlan3
[  272.562730][T14305] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium
[  272.644884][T14308] netlink: 48 bytes leftover after parsing attributes in process `syz.2.2195'.
[  272.695999][T14310] netlink: 'syz.3.2196': attribute type 8 has an invalid length.
[  273.104929][T14319] netlink: 'syz.2.2200': attribute type 1 has an invalid length.
[  273.210087][T14319] 8021q: adding VLAN 0 to HW filter on device bond7
[  273.281838][T14324] bond7: (slave geneve3): making interface the new active one
[  273.314733][T14324] bond7: (slave geneve3): Enslaving as an active interface with an up link
[  273.340205][T14319] netlink: 76 bytes leftover after parsing attributes in process `syz.2.2200'.
[  273.390144][T14328] netlink: 'syz.3.2202': attribute type 21 has an invalid length.
[  273.437599][ T3457] netdevsim netdevsim2 eth0: set [1, 0] type 2 family 0 port 6081 - 0
[  273.466881][ T3457] netdevsim netdevsim2 eth1: set [1, 0] type 2 family 0 port 6081 - 0
[  273.549567][ T3457] netdevsim netdevsim2 eth2: set [1, 0] type 2 family 0 port 6081 - 0
[  273.574124][T10113] netdevsim netdevsim2 eth3: set [1, 0] type 2 family 0 port 6081 - 0
[  273.869833][T14357] netlink: 180 bytes leftover after parsing attributes in process `syz.3.2209'.
[  273.895060][T14356] netlink: 4 bytes leftover after parsing attributes in process `syz.4.2208'.
[  274.161917][T14364] pimreg: left allmulticast mode
[  274.249035][T14368] sit0: left promiscuous mode
[  274.293904][T14368] batadv0: left promiscuous mode
[  274.315491][T14368] bridge_slave_0: left promiscuous mode
[  274.360725][T14368] geneve2: left promiscuous mode
[  274.365784][T14368] geneve2: left allmulticast mode
[  274.371240][T14368] gtp0: left promiscuous mode
[  274.379924][T14368] bridge2: left promiscuous mode
[  274.401203][T14368] vlan2: left allmulticast mode
[  274.406191][T14368] bond0: left allmulticast mode
[  274.415873][T14368] vlan4: left allmulticast mode
[  274.425151][T14368] veth1: left allmulticast mode
[  274.445738][T14368] bond7: left promiscuous mode
[  274.467117][T14368] veth0: left allmulticast mode
[  274.472108][T14368] veth0: left promiscuous mode
[  274.477507][T14368] macvtap1: left promiscuous mode
[  274.482657][T14368] macvtap1: left allmulticast mode
[  274.489546][T14368] ip6tnl1: left promiscuous mode
[  274.494655][T14368] ip6tnl1: left allmulticast mode
[  274.542012][   T13] netdevsim netdevsim3 eth0: unset [0, 0] type 1 family 0 port 8472 - 0
[  274.571326][   T13] netdevsim netdevsim3 eth1: unset [0, 0] type 1 family 0 port 8472 - 0
[  274.630892][T14376] netlink: 8 bytes leftover after parsing attributes in process `syz.3.2213'.
[  274.656022][   T13] netdevsim netdevsim3 eth2: unset [0, 0] type 1 family 0 port 8472 - 0
[  274.678984][   T13] netdevsim netdevsim3 eth3: unset [0, 0] type 1 family 0 port 8472 - 0
[  274.762020][T14376] netlink: 4 bytes leftover after parsing attributes in process `syz.3.2213'.
[  275.065980][T14398] netlink: 'syz.1.2218': attribute type 6 has an invalid length.
[  275.267916][ T3522] erspan0: left promiscuous mode
[  275.409312][T14401] netlink: 'syz.2.2219': attribute type 1 has an invalid length.
[  275.447873][T14401] netlink: 224 bytes leftover after parsing attributes in process `syz.2.2219'.
[  276.094670][T14422] netlink: 'syz.1.2225': attribute type 1 has an invalid length.
[  276.755210][ T5872] Bluetooth: hci4: command 0x0405 tx timeout
[  277.578580][T14474] __nla_validate_parse: 2 callbacks suppressed
[  277.578598][T14474] netlink: 20 bytes leftover after parsing attributes in process `syz.0.2236'.
[  278.247260][T14468] gretap0: entered promiscuous mode
[  278.256934][T14468] vlan3: entered promiscuous mode
[  278.392127][T14478] netlink: 48 bytes leftover after parsing attributes in process `syz.3.2237'.
[  278.392302][T14479] netlink: 48 bytes leftover after parsing attributes in process `syz.3.2237'.
[  278.429004][T14484] netlink: 12 bytes leftover after parsing attributes in process `syz.4.2239'.
[  278.533902][T14484] openvswitch: netlink: Missing key (keys=40, expected=200000)
[  278.589258][T14484] tc_dump_action: action bad kind
[  278.595077][T14484] openvswitch: netlink: IP tunnel dst address not specified
[  278.633015][T14498] netlink: 3 bytes leftover after parsing attributes in process `syz.0.2241'.
[  278.685815][T14498] batadv1: entered promiscuous mode
[  278.719119][T14498] batadv1: entered allmulticast mode
[  278.789341][T14508] netlink: 48 bytes leftover after parsing attributes in process `syz.0.2241'.
[  280.420230][T14570] netlink: 'syz.1.2257': attribute type 3 has an invalid length.
[  280.449644][T14570] syz_tun: entered allmulticast mode
[  280.613343][T14570] infiniband syz0: RDMA CMA: cma_listen_on_dev, error -98
[  280.922682][T14581] rdma_rxe: rxe_newlink: failed to add bond_slave_0
[  280.937820][T14586] netlink: 8 bytes leftover after parsing attributes in process `syz.4.2261'.
[  280.956242][T14569] syz_tun: left allmulticast mode
[  281.818567][T14621] gtp0: entered promiscuous mode
[  281.897866][T14625] netlink: 12 bytes leftover after parsing attributes in process `syz.0.2269'.
[  281.927984][T14625] netlink: 'syz.0.2269': attribute type 1 has an invalid length.
[  281.935906][T14625] netlink: 'syz.0.2269': attribute type 2 has an invalid length.
[  281.954857][T14625] netlink: 80 bytes leftover after parsing attributes in process `syz.0.2269'.
[  282.165900][T14607] raw_sendmsg: syz.2.2265 forgot to set AF_INET. Fix it!
[  282.375758][T14645] netlink: 16 bytes leftover after parsing attributes in process `syz.1.2274'.
[  282.698249][T14658] veth0_to_bridge: entered promiscuous mode
[  282.795265][T14654] veth0_to_bridge: left promiscuous mode
[  282.863868][T14665] tun0: tun_chr_ioctl cmd 2147767520
[  283.110198][T14674] netlink: 28 bytes leftover after parsing attributes in process `syz.3.2282'.
[  283.155056][T14674] netlink: 36 bytes leftover after parsing attributes in process `syz.3.2282'.
[  283.169274][T14674] tipc: Enabling of bearer <eth:syzkaller0> rejected, failed to enable media
[  283.517873][T14687] netlink: 8 bytes leftover after parsing attributes in process `syz.0.2286'.
[  283.545050][T14687] netlink: 8 bytes leftover after parsing attributes in process `syz.0.2286'.
[  283.570980][T14696] netlink: 96 bytes leftover after parsing attributes in process `syz.0.2286'.
[  283.610559][T14687] netlink: 8 bytes leftover after parsing attributes in process `syz.0.2286'.
[  283.741004][T14687] netlink: 8 bytes leftover after parsing attributes in process `syz.0.2286'.
[  283.825350][T14687] erspan0: left allmulticast mode
[  283.842625][T14687] netlink: 8 bytes leftover after parsing attributes in process `syz.0.2286'.
[  283.853562][T14687] netlink: 8 bytes leftover after parsing attributes in process `syz.0.2286'.
[  283.866200][ T9919] IPVS: starting estimator thread 0...
[  283.881533][T14687] netlink: 8 bytes leftover after parsing attributes in process `syz.0.2286'.
[  283.907693][T14687] 8021q: adding VLAN 0 to HW filter on device bond0
[  283.920758][T14687] A link change request failed with some changes committed already. Interface caif0 may have been left with an inconsistent configuration, please check.
[  283.941996][T14707] tipc: Bearer <udp:s>: already 2 bearers with priority 10
[  283.954274][T14707] tipc: Bearer <udp:s>: trying with adjusted priority
[  283.969522][T14710] IPVS: using max 41 ests per chain, 98400 per kthread
[  283.982557][T14707] IPVS: lc: UDP 224.0.0.2:0 - no destination available
[  284.022819][T14707] tipc: Enabled bearer <udp:s>, priority 9
[  284.116911][    C1] IPVS: lc: UDP 224.0.0.2:0 - no destination available
[  284.193195][T14724] netlink: 'syz.2.2293': attribute type 30 has an invalid length.
[  284.257546][T14724] netlink: 'syz.2.2293': attribute type 30 has an invalid length.
[  284.270368][   T49] netdevsim netdevsim2 eth0: set [0, 0] type 1 family 0 port 8472 - 0
[  284.286342][   T49] netdevsim netdevsim2 eth1: set [0, 0] type 1 family 0 port 8472 - 0
[  284.315297][   T49] netdevsim netdevsim2 eth2: set [0, 0] type 1 family 0 port 8472 - 0
[  284.345967][   T49] netdevsim netdevsim2 eth3: set [0, 0] type 1 family 0 port 8472 - 0
[  284.386818][    C1] IPVS: lc: UDP 224.0.0.2:0 - no destination available
[  284.699584][T14747] tipc: Enabling of bearer <eth:syzkaller0> rejected, max 3 bearers permitted
[  284.722258][T14747] syzkaller0: entered promiscuous mode
[  284.731289][T14747] syzkaller0: entered allmulticast mode
[  284.916937][    C1] IPVS: lc: UDP 224.0.0.2:0 - no destination available
[  285.201901][T14765] workqueue: Failed to create a rescuer kthread for wq "nfc2_nci_tx_wq": -EINTR
[  285.449181][T14781] vlan2: entered promiscuous mode
[  285.471588][T14781] macvtap0: entered promiscuous mode
[  285.946917][    C1] IPVS: lc: UDP 224.0.0.2:0 - no destination available
[  286.309524][   T12] nci: nci_rf_intf_activated_ntf_packet: unsupported activation_rf_tech_and_mode 0x7
[  286.986904][    C1] IPVS: lc: UDP 224.0.0.2:0 - no destination available
[  287.089568][T14856] tap0: tun_chr_ioctl cmd 1074025673
[  287.114767][T14862] tap0: tun_chr_ioctl cmd 1074025680
[  287.130753][T14856] tap0: tun_chr_ioctl cmd 1074025673
[  287.136263][T14862] tap0: tun_chr_ioctl cmd 1074025680
[  287.142159][T14858] tipc: Enabling of bearer <eth:syzkaller0> rejected, failed to enable media
[  287.161488][T14856] tap0: tun_chr_ioctl cmd 1074025673
[  287.168157][T14862] tap0: tun_chr_ioctl cmd 1074025680
[  287.671002][T14848] Bluetooth: hci1: Opcode 0x0401 failed: -4
[  288.026893][    C1] IPVS: lc: UDP 224.0.0.2:0 - no destination available
[  288.340928][T14919] openvswitch: netlink: IP tunnel attribute has 20 unknown bytes.
[  288.679050][T14938] __nla_validate_parse: 139 callbacks suppressed
[  288.679090][T14938] netlink: 40 bytes leftover after parsing attributes in process `syz.3.2347'.
[  288.726123][T14940] netlink: 48 bytes leftover after parsing attributes in process `syz.0.2350'.
[  288.782285][T14945] netlink: 48 bytes leftover after parsing attributes in process `syz.0.2350'.
[  288.828937][T14940] netlink: 4 bytes leftover after parsing attributes in process `syz.0.2350'.
[  288.866255][T14948] netlink: 28 bytes leftover after parsing attributes in process `syz.4.2351'.
[  288.909552][ T5884] Bluetooth: hci1: command 0x0406 tx timeout
[  288.912837][T14948] netlink: 28 bytes leftover after parsing attributes in process `syz.4.2351'.
[  288.935157][T14940] macsec0: entered promiscuous mode
[  288.967242][T14940] batadv0: entered promiscuous mode
[  288.979543][T14953] netlink: 4 bytes leftover after parsing attributes in process `syz.4.2351'.
[  289.009169][T14953] netlink: 24 bytes leftover after parsing attributes in process `syz.4.2351'.
[  289.043170][T14940] batadv0: left promiscuous mode
[  289.066869][    C1] IPVS: lc: UDP 224.0.0.2:0 - no destination available
[  289.131848][T14951] bond5: option mode: unable to set because the bond device has slaves
[  289.178663][T14955] 8021q: adding VLAN 0 to HW filter on device macvlan2
[  289.192847][T14955] bond5: (slave macvlan2): Enslaving as a backup interface with an up link
[  289.251461][T14957] netlink: 'syz.4.2351': attribute type 12 has an invalid length.
[  289.777107][T14973] netlink: 'syz.1.2356': attribute type 13 has an invalid length.
[  290.100681][T14985] netlink: 'syz.1.2358': attribute type 10 has an invalid length.
[  290.108862][    C1] IPVS: lc: UDP 224.0.0.2:0 - no destination available
[  290.120367][T14985] syz_tun: entered promiscuous mode
[  290.130297][T14985] bond0: (slave syz_tun): Enslaving as an active interface with an up link
[  290.222473][T14992] (unnamed net_device) (uninitialized): option tlb_dynamic_lb: mode dependency failed, not supported in mode active-backup(1)
[  290.728139][T15002] af_packet: tpacket_rcv: packet too big, clamped from 42 to 4294967286. macoff=82
[  291.047529][T15007] netlink: 24 bytes leftover after parsing attributes in process `syz.3.2365'.
[  291.073244][T15007] nbd: must specify a size in bytes for the device
[  291.146904][    C1] IPVS: lc: UDP 224.0.0.2:0 - no destination available
[  291.424418][T15028] netlink: 288 bytes leftover after parsing attributes in process `syz.1.2370'.
[  291.585528][T15030] bridge: RTM_NEWNEIGH with invalid ether address
[  291.951615][T15052] netlink: 'syz.2.2377': attribute type 10 has an invalid length.
[  292.075242][T15052] dummy0: entered promiscuous mode
[  292.090245][T15052] dummy0: entered allmulticast mode
[  292.105202][T15052] A link change request failed with some changes committed already. Interface dummy0 may have been left with an inconsistent configuration, please check.
[  292.187132][    C1] IPVS: lc: UDP 224.0.0.2:0 - no destination available
[  292.842966][T15086] netlink: 'syz.3.2387': attribute type 3 has an invalid length.
[  292.865251][T15087] netlink: 'syz.3.2387': attribute type 3 has an invalid length.
[  293.237037][    C1] IPVS: lc: UDP 224.0.0.2:0 - no destination available
[  293.495477][T15115] sch_tbf: burst 0 is lower than device veth0_to_team mtu (1514) !
[  293.797351][T15142] ieee802154 phy0 wpan0: encryption failed: -22
[  293.917524][T15128] netlink: 'syz.1.2398': attribute type 1 has an invalid length.
[  293.925399][T15128] __nla_validate_parse: 10 callbacks suppressed
[  293.925415][T15128] netlink: 5624 bytes leftover after parsing attributes in process `syz.1.2398'.
[  294.266897][    C1] IPVS: lc: UDP 224.0.0.2:0 - no destination available
[  294.411025][T15158] netlink: 8 bytes leftover after parsing attributes in process `syz.1.2404'.
[  294.655650][T15163] netlink: 44 bytes leftover after parsing attributes in process `syz.3.2405'.
[  294.744720][T15165] syzkaller0: tun_chr_ioctl cmd 1074025677
[  294.753896][T15165] syzkaller0: linktype set to 1
[  294.781201][T15163] netlink: 12 bytes leftover after parsing attributes in process `syz.3.2405'.
[  294.793367][T15176] FAULT_INJECTION: forcing a failure.
[  294.793367][T15176] name fail_usercopy, interval 1, probability 0, space 0, times 0
[  294.815655][T15176] CPU: 0 UID: 0 PID: 15176 Comm: syz.2.2407 Not tainted syzkaller #0 PREEMPT(full) 
[  294.815681][T15176] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/12/2025
[  294.815698][T15176] Call Trace:
[  294.815705][T15176]  <TASK>
[  294.815713][T15176]  dump_stack_lvl+0x189/0x250
[  294.815740][T15176]  ? __pfx____ratelimit+0x10/0x10
[  294.815757][T15176]  ? __pfx_dump_stack_lvl+0x10/0x10
[  294.815777][T15176]  ? __pfx__printk+0x10/0x10
[  294.815798][T15176]  ? __might_fault+0xb0/0x130
[  294.815832][T15176]  should_fail_ex+0x414/0x560
[  294.815859][T15176]  _copy_from_user+0x2d/0xb0
[  294.815880][T15176]  do_tcp_setsockopt+0x47d/0x1f20
[  294.815905][T15176]  ? __pfx_do_tcp_setsockopt+0x10/0x10
[  294.815926][T15176]  ? __pfx_aa_sk_perm+0x10/0x10
[  294.815951][T15176]  ? __fget_files+0x2a/0x420
[  294.815965][T15176]  ? aa_sock_opt_perm+0xff/0x1b0
[  294.815984][T15176]  ? sock_common_setsockopt+0x36/0xc0
[  294.816004][T15176]  ? tcp_setsockopt+0x3d/0xe0
[  294.816020][T15176]  ? __pfx_sock_common_setsockopt+0x10/0x10
[  294.816044][T15176]  do_sock_setsockopt+0x179/0x1b0
[  294.816069][T15176]  __x64_sys_setsockopt+0x13f/0x1b0
[  294.816094][T15176]  do_syscall_64+0xfa/0x3b0
[  294.816110][T15176]  ? lockdep_hardirqs_on+0x9c/0x150
[  294.816126][T15176]  ? entry_SYSCALL_64_after_hwframe+0x77/0x7f
[  294.816143][T15176]  ? clear_bhb_loop+0x60/0xb0
[  294.816163][T15176]  entry_SYSCALL_64_after_hwframe+0x77/0x7f
[  294.816180][T15176] RIP: 0033:0x7f085a38ebe9
[  294.816196][T15176] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48
[  294.816211][T15176] RSP: 002b:00007f085b13a038 EFLAGS: 00000246 ORIG_RAX: 0000000000000036
[  294.816230][T15176] RAX: ffffffffffffffda RBX: 00007f085a5c6090 RCX: 00007f085a38ebe9
[  294.816243][T15176] RDX: 0000000000000014 RSI: 0000000000000006 RDI: 0000000000000003
[  294.816253][T15176] RBP: 00007f085b13a090 R08: 0000000000000004 R09: 0000000000000000
[  294.816264][T15176] R10: 0000200000000080 R11: 0000000000000246 R12: 0000000000000001
[  294.816275][T15176] R13: 00007f085a5c6128 R14: 00007f085a5c6090 R15: 00007fffda93b208
[  294.816305][T15176]  </TASK>
[  294.861946][T15174] syzkaller0: tun_chr_ioctl cmd 1074025673
[  295.307008][    C1] IPVS: lc: UDP 224.0.0.2:0 - no destination available
[  295.359028][T15189] netlink: 12 bytes leftover after parsing attributes in process `syz.1.2410'.
[  295.360419][T15187] netdevsim netdevsim2 eth3 (unregistering): unset [0, 0] type 1 family 0 port 8472 - 0
[  295.381441][T15187] netdevsim netdevsim2 eth3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[  295.400114][T15190] netlink: 'syz.2.2411': attribute type 1 has an invalid length.
[  295.409319][T15190] netlink: 'syz.2.2411': attribute type 2 has an invalid length.
[  295.420713][T15191] netlink: 8 bytes leftover after parsing attributes in process `syz.4.2412'.
[  295.524627][T15187] netdevsim netdevsim2 eth2 (unregistering): unset [0, 0] type 1 family 0 port 8472 - 0
[  295.555312][T15187] netdevsim netdevsim2 eth2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[  295.685929][T15187] netdevsim netdevsim2 eth1 (unregistering): unset [0, 0] type 1 family 0 port 8472 - 0
[  295.724861][T15187] netdevsim netdevsim2 eth1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[  295.809249][T15187] netdevsim netdevsim2 eth0 (unregistering): unset [0, 0] type 1 family 0 port 8472 - 0
[  295.829738][T15187] netdevsim netdevsim2 eth0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[  295.955089][T15212] ieee802154 phy0 wpan0: encryption failed: -22
[  295.968453][T15213] netlink: 20 bytes leftover after parsing attributes in process `syz.3.2414'.
[  296.036688][T15215] netlink: 128 bytes leftover after parsing attributes in process `syz.3.2414'.
[  296.089200][ T3501] netdevsim netdevsim2 eth0: set [0, 0] type 1 family 0 port 8472 - 0
[  296.112212][ T3501] netdevsim netdevsim2 eth0: set [1, 0] type 2 family 0 port 6081 - 0
[  296.122856][ T3501] netdevsim netdevsim2 eth1: set [0, 0] type 1 family 0 port 8472 - 0
[  296.133241][ T3501] netdevsim netdevsim2 eth1: set [1, 0] type 2 family 0 port 6081 - 0
[  296.143914][T15223] FAULT_INJECTION: forcing a failure.
[  296.143914][T15223] name fail_usercopy, interval 1, probability 0, space 0, times 0
[  296.160722][ T3501] netdevsim netdevsim2 eth2: set [0, 0] type 1 family 0 port 8472 - 0
[  296.169286][T15223] CPU: 1 UID: 0 PID: 15223 Comm: syz.1.2419 Not tainted syzkaller #0 PREEMPT(full) 
[  296.169307][T15223] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/12/2025
[  296.169317][T15223] Call Trace:
[  296.169333][T15223]  <TASK>
[  296.169341][T15223]  dump_stack_lvl+0x189/0x250
[  296.169364][T15223]  ? __pfx____ratelimit+0x10/0x10
[  296.169380][T15223]  ? __pfx_dump_stack_lvl+0x10/0x10
[  296.169397][T15223]  ? __pfx__printk+0x10/0x10
[  296.169430][T15223]  should_fail_ex+0x414/0x560
[  296.169456][T15223]  _copy_to_user+0x31/0xb0
[  296.169476][T15223]  simple_read_from_buffer+0xe1/0x170
[  296.169503][T15223]  proc_fail_nth_read+0x1b3/0x220
[  296.169525][T15223]  ? __pfx_proc_fail_nth_read+0x10/0x10
[  296.169547][T15223]  ? rw_verify_area+0x2a6/0x4d0
[  296.169566][T15223]  ? __lock_acquire+0xab9/0xd20
[  296.169585][T15223]  ? __pfx_proc_fail_nth_read+0x10/0x10
[  296.169605][T15223]  vfs_read+0x1fd/0xa30
[  296.169624][T15223]  ? fdget_pos+0x247/0x320
[  296.169644][T15223]  ? __pfx___mutex_lock+0x10/0x10
[  296.169663][T15223]  ? __pfx_vfs_read+0x10/0x10
[  296.169686][T15223]  ? __fget_files+0x2a/0x420
[  296.169705][T15223]  ? __fget_files+0x3a0/0x420
[  296.169719][T15223]  ? __fget_files+0x2a/0x420
[  296.169744][T15223]  ksys_read+0x145/0x250
[  296.169767][T15223]  ? __pfx_ksys_read+0x10/0x10
[  296.169793][T15223]  ? do_syscall_64+0xbe/0x3b0
[  296.169816][T15223]  do_syscall_64+0xfa/0x3b0
[  296.169831][T15223]  ? lockdep_hardirqs_on+0x9c/0x150
[  296.169848][T15223]  ? entry_SYSCALL_64_after_hwframe+0x77/0x7f
[  296.169864][T15223]  ? clear_bhb_loop+0x60/0xb0
[  296.169885][T15223]  entry_SYSCALL_64_after_hwframe+0x77/0x7f
[  296.169901][T15223] RIP: 0033:0x7fead6b8d5fc
[  296.169918][T15223] Code: ec 28 48 89 54 24 18 48 89 74 24 10 89 7c 24 08 e8 99 93 02 00 48 8b 54 24 18 48 8b 74 24 10 41 89 c0 8b 7c 24 08 31 c0 0f 05 <48> 3d 00 f0 ff ff 77 34 44 89 c7 48 89 44 24 08 e8 ef 93 02 00 48
[  296.169932][T15223] RSP: 002b:00007fead7ac0030 EFLAGS: 00000246 ORIG_RAX: 0000000000000000
[  296.169951][T15223] RAX: ffffffffffffffda RBX: 00007fead6dc6090 RCX: 00007fead6b8d5fc
[  296.169963][T15223] RDX: 000000000000000f RSI: 00007fead7ac00a0 RDI: 0000000000000005
[  296.169974][T15223] RBP: 00007fead7ac0090 R08: 0000000000000000 R09: 0000000000000000
[  296.169985][T15223] R10: 0000200000000080 R11: 0000000000000246 R12: 0000000000000001
[  296.169996][T15223] R13: 00007fead6dc6128 R14: 00007fead6dc6090 R15: 00007fff13588908
[  296.170027][T15223]  </TASK>
[  296.403919][    C1] IPVS: lc: UDP 224.0.0.2:0 - no destination available
[  296.419718][ T3501] netdevsim netdevsim2 eth2: set [1, 0] type 2 family 0 port 6081 - 0
[  296.449232][ T3457] netdevsim netdevsim2 eth3: set [0, 0] type 1 family 0 port 8472 - 0
[  296.476956][ T3457] netdevsim netdevsim2 eth3: set [1, 0] type 2 family 0 port 6081 - 0
[  296.796977][T15240] netlink: 4 bytes leftover after parsing attributes in process `syz.3.2423'.
[  297.098457][T15255] netlink: 'syz.4.2427': attribute type 13 has an invalid length.
[  297.119984][T15255] netlink: 'syz.4.2427': attribute type 17 has an invalid length.
[  297.224240][T15255] A link change request failed with some changes committed already. Interface caif0 may have been left with an inconsistent configuration, please check.
[  297.339772][T15255] netlink: 40 bytes leftover after parsing attributes in process `syz.4.2427'.
[  297.363670][T15255] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium
[  297.467191][    C1] IPVS: lc: UDP 224.0.0.2:0 - no destination available
[  297.490026][T15255] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium
[  298.283511][T15314] batman_adv: batadv0: Adding interface: ip6gretap1
[  298.299981][T15314] batman_adv: batadv0: The MTU of interface ip6gretap1 is too small (1434) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem.
[  298.347412][T15314] batman_adv: batadv0: Interface activated: ip6gretap1
[  298.380720][T15318] sch_tbf: burst 127 is lower than device syzkaller0 mtu (1514) !
[  298.431136][T15318] tipc: Enabled bearer <eth:syzkaller0>, priority 0
[  298.438714][T15318] syzkaller0: entered promiscuous mode
[  298.444191][T15318] syzkaller0: entered allmulticast mode
[  298.492372][T15317] tipc: Resetting bearer <eth:syzkaller0>
[  298.506900][    C1] IPVS: lc: UDP 224.0.0.2:0 - no destination available
[  298.567079][T15317] tipc: Disabling bearer <eth:syzkaller0>
[  299.104397][T15347] bridge7: entered allmulticast mode
[  299.135074][T15349] ip6erspan0: entered promiscuous mode
[  299.292834][T15353] __nla_validate_parse: 4 callbacks suppressed
[  299.292853][T15353] netlink: 12 bytes leftover after parsing attributes in process `syz.4.2451'.
[  299.546989][    C1] IPVS: lc: UDP 224.0.0.2:0 - no destination available
[  299.870761][T15382] netlink: 68 bytes leftover after parsing attributes in process `syz.2.2458'.
[  299.893744][T15382] netlink: 'syz.2.2458': attribute type 1 has an invalid length.
[  300.108458][   T12] ip6_tunnel: ip6tnl3 xmit: Local address not yet configured!
[  300.130714][   T12] ip6_tunnel: ip6tnl3 xmit: Local address not yet configured!
[  300.139741][   T43] ip6_tunnel: ip6tnl3 xmit: Local address not yet configured!
[  300.154275][T15402] netlink: 16 bytes leftover after parsing attributes in process `syz.3.2463'.
[  300.179517][T15402] IPv6: sit2: Disabled Multicast RS
[  300.191518][T15402] sit2: entered allmulticast mode
[  300.247226][T15410] netlink: 324 bytes leftover after parsing attributes in process `syz.0.2464'.
[  300.315401][T15413] (unnamed net_device) (uninitialized): option broadcast_neighbor: mode dependency failed, not supported in mode balance-rr(0)
[  300.372723][T15419] netlink: 'syz.1.2469': attribute type 99 has an invalid length.
[  300.402847][T15419] netlink: 'syz.1.2469': attribute type 99 has an invalid length.
[  300.475730][T15416] syz.3.2468: vmalloc error: size 6291456, failed to allocated page array size 12288, mode:0x400dc2(GFP_KERNEL_ACCOUNT|__GFP_HIGHMEM|__GFP_ZERO), nodemask=(null),cpuset=/,mems_allowed=0-1
[  300.528124][T15427] wg1: entered promiscuous mode
[  300.534759][T15427] wg1: entered allmulticast mode
[  300.543226][T15416] CPU: 0 UID: 0 PID: 15416 Comm: syz.3.2468 Not tainted syzkaller #0 PREEMPT(full) 
[  300.543250][T15416] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/12/2025
[  300.543259][T15416] Call Trace:
[  300.543266][T15416]  <TASK>
[  300.543274][T15416]  dump_stack_lvl+0x189/0x250
[  300.543300][T15416]  ? __pfx_dump_stack_lvl+0x10/0x10
[  300.543320][T15416]  ? __pfx__printk+0x10/0x10
[  300.543341][T15416]  ? cpuset_print_current_mems_allowed+0x1f/0x360
[  300.543361][T15416]  ? cpuset_print_current_mems_allowed+0x1f/0x360
[  300.543381][T15416]  ? cpuset_print_current_mems_allowed+0x2ee/0x360
[  300.543403][T15416]  warn_alloc+0x214/0x310
[  300.543432][T15416]  ? __pfx_warn_alloc+0x10/0x10
[  300.543464][T15416]  ? __get_vm_area_node+0x28f/0x300
[  300.543487][T15416]  ? hash_netportnet_create+0x354/0xf90
[  300.543510][T15416]  __vmalloc_node_range_noprof+0x67e/0x12f0
[  300.543564][T15416]  ? __pfx___vmalloc_node_range_noprof+0x10/0x10
[  300.543594][T15416]  ? rcu_is_watching+0x15/0xb0
[  300.543613][T15416]  ? hash_netportnet_create+0x354/0xf90
[  300.543629][T15416]  ? hash_netportnet_create+0x354/0xf90
[  300.543644][T15416]  __kvmalloc_node_noprof+0x3b8/0x5f0
[  300.543665][T15416]  ? hash_netportnet_create+0x354/0xf90
[  300.543687][T15416]  ? hash_netportnet_create+0x2fa/0xf90
[  300.543710][T15416]  hash_netportnet_create+0x354/0xf90
[  300.543736][T15416]  ? __nla_parse+0x40/0x60
[  300.543760][T15416]  ? __pfx_hash_netportnet_create+0x10/0x10
[  300.543779][T15416]  ip_set_create+0xa97/0x1940
[  300.543802][T15416]  ? ip_set_create+0x4a2/0x1940
[  300.543834][T15416]  ? __pfx_ip_set_create+0x10/0x10
[  300.543892][T15416]  nfnetlink_rcv_msg+0xb4d/0x1130
[  300.543916][T15416]  ? nfnetlink_rcv_msg+0x20d/0x1130
[  300.543958][T15416]  ? __pfx_nfnetlink_rcv_msg+0x10/0x10
[  300.544013][T15416]  ? rcu_is_watching+0x15/0xb0
[  300.544048][T15416]  netlink_rcv_skb+0x208/0x470
[  300.544067][T15416]  ? __pfx_nfnetlink_rcv_msg+0x10/0x10
[  300.544091][T15416]  ? __pfx_netlink_rcv_skb+0x10/0x10
[  300.544127][T15416]  ? bpf_lsm_capable+0x9/0x20
[  300.544147][T15416]  ? security_capable+0x7e/0x2e0
[  300.544178][T15416]  nfnetlink_rcv+0x26a/0x2520
[  300.544201][T15416]  ? is_bpf_text_address+0x26/0x2b0
[  300.544227][T15416]  ? kernel_text_address+0xa5/0xe0
[  300.544249][T15416]  ? __kernel_text_address+0xd/0x40
[  300.544269][T15416]  ? unwind_get_return_address+0x4d/0x90
[  300.544287][T15416]  ? __pfx_stack_trace_consume_entry+0x10/0x10
[  300.544306][T15416]  ? arch_stack_walk+0xfc/0x150
[  300.544342][T15416]  ? __pfx_nfnetlink_rcv+0x10/0x10
[  300.544365][T15416]  ? stack_depot_save_flags+0x40/0x860
[  300.544391][T15416]  ? __lock_acquire+0xab9/0xd20
[  300.544440][T15416]  ? __lock_acquire+0xab9/0xd20
[  300.544474][T15416]  ? netlink_deliver_tap+0x2e/0x1b0
[  300.544497][T15416]  ? netlink_deliver_tap+0x2e/0x1b0
[  300.544524][T15416]  netlink_unicast+0x82c/0x9e0
[  300.544555][T15416]  ? __pfx_netlink_unicast+0x10/0x10
[  300.544578][T15416]  ? netlink_sendmsg+0x642/0xb30
[  300.544593][T15416]  ? skb_put+0x11b/0x210
[  300.544616][T15416]  netlink_sendmsg+0x805/0xb30
[  300.544643][T15416]  ? __pfx_netlink_sendmsg+0x10/0x10
[  300.544665][T15416]  ? aa_sock_msg_perm+0xf1/0x1d0
[  300.544683][T15416]  ? bpf_lsm_socket_sendmsg+0x9/0x20
[  300.544699][T15416]  ? __pfx_netlink_sendmsg+0x10/0x10
[  300.544715][T15416]  __sock_sendmsg+0x21c/0x270
[  300.544738][T15416]  ____sys_sendmsg+0x505/0x830
[  300.544760][T15416]  ? __pfx_____sys_sendmsg+0x10/0x10
[  300.544787][T15416]  ? import_iovec+0x74/0xa0
[  300.544809][T15416]  ___sys_sendmsg+0x21f/0x2a0
[  300.544829][T15416]  ? __pfx____sys_sendmsg+0x10/0x10
[  300.544886][T15416]  ? __fget_files+0x2a/0x420
[  300.544902][T15416]  ? __fget_files+0x3a0/0x420
[  300.544928][T15416]  __x64_sys_sendmsg+0x19b/0x260
[  300.544951][T15416]  ? __pfx___x64_sys_sendmsg+0x10/0x10
[  300.544981][T15416]  ? rcu_is_watching+0x15/0xb0
[  300.545004][T15416]  ? do_syscall_64+0xbe/0x3b0
[  300.545026][T15416]  do_syscall_64+0xfa/0x3b0
[  300.545043][T15416]  ? lockdep_hardirqs_on+0x9c/0x150
[  300.545060][T15416]  ? entry_SYSCALL_64_after_hwframe+0x77/0x7f
[  300.545076][T15416]  ? clear_bhb_loop+0x60/0xb0
[  300.545097][T15416]  entry_SYSCALL_64_after_hwframe+0x77/0x7f
[  300.545114][T15416] RIP: 0033:0x7fb64a38ebe9
[  300.545136][T15416] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48
[  300.545151][T15416] RSP: 002b:00007fb64b15b038 EFLAGS: 00000246 ORIG_RAX: 000000000000002e
[  300.545170][T15416] RAX: ffffffffffffffda RBX: 00007fb64a5c6090 RCX: 00007fb64a38ebe9
[  300.545182][T15416] RDX: 0000000000000000 RSI: 0000200000000040 RDI: 0000000000000009
[  300.545193][T15416] RBP: 00007fb64a411e19 R08: 0000000000000000 R09: 0000000000000000
[  300.545203][T15416] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000
[  300.545214][T15416] R13: 00007fb64a5c6128 R14: 00007fb64a5c6090 R15: 00007ffc777a0fe8
[  300.545246][T15416]  </TASK>
[  300.587507][    C1] IPVS: lc: UDP 224.0.0.2:0 - no destination available
[  300.600862][T15416] Mem-Info:
[  300.638210][T15434] netlink: 48 bytes leftover after parsing attributes in process `syz.1.2472'.
[  300.642584][T15416] active_anon:9898 inactive_anon:0 isolated_anon:0
[  300.642584][T15416]  active_file:3490 inactive_file:39939 isolated_file:0
[  300.642584][T15416]  unevictable:768 dirty:161 writeback:0
[  300.642584][T15416]  slab_reclaimable:12378 slab_unreclaimable:183843
[  300.642584][T15416]  mapped:32013 shmem:2981 pagetables:1123
[  300.642584][T15416]  sec_pagetables:0 bounce:0
[  300.642584][T15416]  kernel_misc_reclaimable:0
[  300.642584][T15416]  free:1228432 free_pcp:12342 free_cma:0
[  300.782455][T15434] netlink: 48 bytes leftover after parsing attributes in process `syz.1.2472'.
[  300.783922][T15416] Node 0 active_anon:39892kB inactive_anon:0kB active_file:13960kB inactive_file:159556kB unevictable:1536kB isolated(anon):0kB isolated(file):0kB mapped:129552kB dirty:644kB writeback:0kB shmem:11888kB shmem_thp:0kB shmem_pmdmapped:0kB anon_thp:0kB kernel_stack:13372kB pagetables:4372kB sec_pagetables:0kB all_unreclaimable? no Balloon:0kB
[  300.839538][ T9919] ip6_tunnel: ip6tnl3 xmit: Local address not yet configured!
[  300.848041][T15416] Node 1 active_anon:0kB inactive_anon:0kB active_file:0kB inactive_file:200kB unevictable:1536kB isolated(anon):0kB isolated(file):0kB mapped:0kB dirty:0kB writeback:0kB shmem:1536kB shmem_thp:0kB shmem_pmdmapped:0kB anon_thp:0kB kernel_stack:48kB pagetables:120kB sec_pagetables:0kB all_unreclaimable? no Balloon:0kB
[  301.205763][T15416] Node 0 DMA free:15360kB boost:0kB min:204kB low:252kB high:300kB reserved_highatomic:0KB free_highatomic:0KB active_anon:0kB inactive_anon:0kB active_file:0kB inactive_file:0kB unevictable:0kB writepending:0kB present:15992kB managed:15360kB mlocked:0kB bounce:0kB free_pcp:0kB local_pcp:0kB free_cma:0kB
[  301.245120][ T9919] ip6_tunnel: ip6tnl3 xmit: Local address not yet configured!
[  301.277956][T15416] lowmem_reserve[]: 0 2497 2499 2499 2499
[  301.298917][T15416] Node 0 DMA32 free:998440kB boost:0kB min:34248kB low:42808kB high:51368kB reserved_highatomic:0KB free_highatomic:0KB active_anon:40432kB inactive_anon:0kB active_file:13960kB inactive_file:157992kB unevictable:1536kB writepending:648kB present:3129332kB managed:2557424kB mlocked:0kB bounce:0kB free_pcp:38404kB local_pcp:13288kB free_cma:0kB
[  301.355454][T15416] lowmem_reserve[]: 0 0 1 1 1
[  301.380325][T15416] Node 0 Normal free:24kB boost:0kB min:20kB low:24kB high:28kB reserved_highatomic:0KB free_highatomic:0KB active_anon:48kB inactive_anon:0kB active_file:0kB inactive_file:1564kB unevictable:0kB writepending:0kB present:1048580kB managed:1644kB mlocked:0kB bounce:0kB free_pcp:8kB local_pcp:0kB free_cma:0kB
[  301.399824][T15446] netlink: 'syz.1.2473': attribute type 1 has an invalid length.
[  301.418620][T15444] netlink: 20 bytes leftover after parsing attributes in process `syz.2.2474'.
[  301.454577][T15416] lowmem_reserve[]: 0 0 0 0 0
[  301.474450][T15416] Node 1 Normal free:3891992kB boost:0kB min:55632kB low:69540kB high:83448kB reserved_highatomic:0KB free_highatomic:0KB active_anon:0kB inactive_anon:0kB active_file:0kB inactive_file:200kB unevictable:1536kB writepending:0kB present:4194300kB managed:4111100kB mlocked:0kB bounce:0kB free_pcp:17568kB local_pcp:9352kB free_cma:0kB
[  301.539285][T15416] lowmem_reserve[]: 0 0 0 0 0
[  301.544141][T15416] Node 0 DMA: 0*4kB 0*8kB 0*16kB 0*32kB 0*64kB 0*128kB 0*256kB 0*512kB 1*1024kB (U) 1*2048kB (M) 3*4096kB (M) = 15360kB
[  301.580031][T15416] Node 0 DMA32: 1172*4kB (UME) 427*8kB (UME) 72*16kB (UM) 447*32kB (UM) 175*64kB (UM) 68*128kB (UM) 80*256kB (UM) 39*512kB (UME) 20*1024kB (UME) 5*2048kB (UM) 217*4096kB (UM) = 1003464kB
[  301.616463][T15416] Node 0 Normal: 0*4kB 1*8kB (M) 1*16kB (M) 0*32kB 0*64kB 0*128kB 0*256kB 0*512kB 0*1024kB 0*2048kB 0*4096kB = 24kB
[  301.636922][    C1] IPVS: lc: UDP 224.0.0.2:0 - no destination available
[  301.661569][T15416] Node 1 Normal: 190*4kB (UE) 48*8kB (UME) 40*16kB (UME) 87*32kB (UME) 37*64kB (UME) 10*128kB (UME) 3*256kB (ME) 4*512kB (UME) 2*1024kB (UM) 2*2048kB (UE) 946*4096kB (M) = 3891992kB
[  301.686319][T15416] Node 0 hugepages_total=0 hugepages_free=0 hugepages_surp=0 hugepages_size=1048576kB
[  301.695966][T15416] Node 0 hugepages_total=2 hugepages_free=1 hugepages_surp=0 hugepages_size=2048kB
[  301.706074][T15416] Node 1 hugepages_total=0 hugepages_free=0 hugepages_surp=0 hugepages_size=1048576kB
[  301.742808][T15416] Node 1 hugepages_total=2 hugepages_free=2 hugepages_surp=0 hugepages_size=2048kB
[  301.760163][T15416] 44805 total pagecache pages
[  301.774772][T15416] 0 pages in swap cache
[  301.802720][T15416] Free swap  = 124996kB
[  301.817229][T15416] Total swap = 124996kB
[  301.826875][T15416] 2097051 pages RAM
[  301.830714][T15416] 0 pages HighMem/MovableOnly
[  301.845659][T15416] 425669 pages reserved
[  301.856848][T15416] 0 pages cma reserved
[  301.881867][T15458] netlink: 324 bytes leftover after parsing attributes in process `syz.0.2478'.
[  301.894752][T15465] tipc: Enabled bearer <eth:syzkaller0>, priority 0
[  301.912708][T15465] syzkaller0: entered promiscuous mode
[  301.922708][T15465] syzkaller0: entered allmulticast mode
[  301.965541][T15465] tipc: Resetting bearer <eth:syzkaller0>
[  301.991349][T15464] tipc: Resetting bearer <eth:syzkaller0>
[  302.040033][T15464] tipc: Disabling bearer <eth:syzkaller0>
[  302.049358][T15475] FAULT_INJECTION: forcing a failure.
[  302.049358][T15475] name fail_usercopy, interval 1, probability 0, space 0, times 0
[  302.067114][T15475] CPU: 1 UID: 0 PID: 15475 Comm: syz.3.2484 Not tainted syzkaller #0 PREEMPT(full) 
[  302.067143][T15475] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/12/2025
[  302.067161][T15475] Call Trace:
[  302.067169][T15475]  <TASK>
[  302.067177][T15475]  dump_stack_lvl+0x189/0x250
[  302.067202][T15475]  ? __pfx____ratelimit+0x10/0x10
[  302.067220][T15475]  ? __pfx_dump_stack_lvl+0x10/0x10
[  302.067240][T15475]  ? __pfx__printk+0x10/0x10
[  302.067262][T15475]  ? __might_fault+0xb0/0x130
[  302.067295][T15475]  should_fail_ex+0x414/0x560
[  302.067322][T15475]  _copy_from_user+0x2d/0xb0
[  302.067342][T15475]  __sys_bind+0x199/0x3e0
[  302.067369][T15475]  ? __pfx___sys_bind+0x10/0x10
[  302.067404][T15475]  ? __pfx_ksys_write+0x10/0x10
[  302.067423][T15475]  ? rcu_is_watching+0x15/0xb0
[  302.067449][T15475]  __x64_sys_bind+0x7a/0x90
[  302.067472][T15475]  do_syscall_64+0xfa/0x3b0
[  302.067489][T15475]  ? lockdep_hardirqs_on+0x9c/0x150
[  302.067505][T15475]  ? entry_SYSCALL_64_after_hwframe+0x77/0x7f
[  302.067522][T15475]  ? clear_bhb_loop+0x60/0xb0
[  302.067543][T15475]  entry_SYSCALL_64_after_hwframe+0x77/0x7f
[  302.067560][T15475] RIP: 0033:0x7fb64a38ebe9
[  302.067576][T15475] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48
[  302.067590][T15475] RSP: 002b:00007fb64b17c038 EFLAGS: 00000246 ORIG_RAX: 0000000000000031
[  302.067610][T15475] RAX: ffffffffffffffda RBX: 00007fb64a5c5fa0 RCX: 00007fb64a38ebe9
[  302.067622][T15475] RDX: 000000000000000c RSI: 0000200000000000 RDI: 0000000000000003
[  302.067633][T15475] RBP: 00007fb64b17c090 R08: 0000000000000000 R09: 0000000000000000
[  302.067644][T15475] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001
[  302.067655][T15475] R13: 00007fb64a5c6038 R14: 00007fb64a5c5fa0 R15: 00007ffc777a0fe8
[  302.067686][T15475]  </TASK>
[  302.666999][    C1] IPVS: lc: UDP 224.0.0.2:0 - no destination available
[  302.708455][T15500] netlink: 'syz.3.2492': attribute type 1 has an invalid length.
[  302.741151][T15500] netlink: 'syz.3.2492': attribute type 1 has an invalid length.
[  302.954222][T15508] netlink: 'syz.3.2492': attribute type 1 has an invalid length.
[  303.172388][T15517] vlan0: entered promiscuous mode
[  303.332406][T15524] netlink: 12 bytes leftover after parsing attributes in process `syz.2.2497'.
[  303.420761][T15530] netlink: 4 bytes leftover after parsing attributes in process `syz.1.2499'.
[  303.706933][    C1] IPVS: lc: UDP 224.0.0.2:0 - no destination available
[  304.026960][    C1] ip6_tunnel: ip6tnl3 xmit: Local address not yet configured!
[  304.747901][    C1] IPVS: lc: UDP 224.0.0.2:0 - no destination available
[  304.755855][T15570] __nla_validate_parse: 4 callbacks suppressed
[  304.755869][T15570] netlink: 12 bytes leftover after parsing attributes in process `syz.3.2510'.
[  304.980835][T15579] netlink: 'syz.3.2511': attribute type 10 has an invalid length.
[  304.994388][T15582] tipc: Enabled bearer <eth:syzkaller0>, priority 0
[  305.037966][T15579] bond0: (slave wlan1): Opening slave failed
[  305.125301][T15582] tipc: Disabling bearer <eth:syzkaller0>
[  305.597122][T15602] IPVS: stopping backup sync thread 15606 ...
[  305.654198][T15612] sch_tbf: burst 19872 is lower than device lo mtu (65550) !
[  305.773473][T15612] netlink: 44 bytes leftover after parsing attributes in process `syz.2.2520'.
[  305.786901][    C1] IPVS: lc: UDP 224.0.0.2:0 - no destination available
[  305.874128][T15618] netlink: 'syz.3.2521': attribute type 2 has an invalid length.
[  305.905782][T15618] netlink: 'syz.3.2521': attribute type 1 has an invalid length.
[  305.920600][T15618] netlink: 152 bytes leftover after parsing attributes in process `syz.3.2521'.
[  306.009722][T15625] netlink: 80 bytes leftover after parsing attributes in process `syz.3.2523'.
[  306.084637][T15621] netlink: 4 bytes leftover after parsing attributes in process `syz.2.2522'.
[  306.482186][T15636] netdevsim netdevsim1 eth3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[  306.508170][T15650] netlink: 36 bytes leftover after parsing attributes in process `syz.0.2530'.
[  306.621886][T15636] netdevsim netdevsim1 eth2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[  306.751346][T15636] netdevsim netdevsim1 eth1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[  306.826962][    C1] IPVS: lc: UDP 224.0.0.2:0 - no destination available
[  306.929753][T15636] netdevsim netdevsim1 eth0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[  306.979148][T15675] netlink: 4 bytes leftover after parsing attributes in process `syz.0.2538'.
[  307.252807][T15690] netlink: 40 bytes leftover after parsing attributes in process `syz.2.2540'.
[  307.294723][   T12] netdevsim netdevsim1 eth0: set [1, 0] type 2 family 0 port 6081 - 0
[  307.333006][   T49] netdevsim netdevsim1 eth1: set [1, 0] type 2 family 0 port 6081 - 0
[  307.395736][   T12] netdevsim netdevsim1 eth2: set [1, 0] type 2 family 0 port 6081 - 0
[  307.454227][   T13] netdevsim netdevsim1 eth3: set [1, 0] type 2 family 0 port 6081 - 0
[  307.753998][T15714] pimreg: entered allmulticast mode
[  307.767663][T15714] pimreg: left allmulticast mode
[  307.876913][    C1] IPVS: lc: UDP 224.0.0.2:0 - no destination available
[  307.910729][T15714] netlink: 12 bytes leftover after parsing attributes in process `syz.1.2549'.
[  308.174818][T15726] netlink: 104 bytes leftover after parsing attributes in process `syz.4.2551'.
[  308.330065][T15744] openvswitch: netlink: Flow actions may not be safe on all matching packets.
[  308.503269][T15752] syzkaller0: entered promiscuous mode
[  308.509547][T15752] syzkaller0: entered allmulticast mode
[  308.832729][T15770] dvmrp8: entered allmulticast mode
[  308.874762][T15768] dvmrp8: left allmulticast mode
[  308.906892][    C1] IPVS: lc: UDP 224.0.0.2:0 - no destination available
[  308.977857][T15776] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium
[  309.338693][T15792] syzkaller1: entered promiscuous mode
[  309.344195][T15792] syzkaller1: entered allmulticast mode
[  309.702514][T15814] netlink: 'syz.1.2576': attribute type 83 has an invalid length.
[  309.812351][T15823] (unnamed net_device) (uninitialized): option arp_all_targets: invalid value (3)
[  309.849763][T15822] __nla_validate_parse: 2 callbacks suppressed
[  309.849783][T15822] netlink: 60 bytes leftover after parsing attributes in process `syz.3.2578'.
[  309.946904][    C1] IPVS: lc: UDP 224.0.0.2:0 - no destination available
[  310.098401][T15833] netlink: 4 bytes leftover after parsing attributes in process `syz.0.2581'.
[  310.525351][T15862] netlink: 24 bytes leftover after parsing attributes in process `syz.0.2594'.
[  310.534917][T15862] netlink: 24 bytes leftover after parsing attributes in process `syz.0.2594'.
[  310.544301][T15862] netlink: 'syz.0.2594': attribute type 3 has an invalid length.
[  310.594255][T15864] netlink: 8 bytes leftover after parsing attributes in process `syz.3.2593'.
[  310.606054][   T30] audit: type=1800 audit(1756757147.890:4): pid=15862 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed(directio) comm="syz.0.2594" name="blkio.bfq.time_recursive" dev="tmpfs" ino=2464 res=0 errno=0
[  310.641421][T15863] netlink: 24 bytes leftover after parsing attributes in process `syz.3.2593'.
[  310.685615][T15862] netlink: 36 bytes leftover after parsing attributes in process `syz.0.2594'.
[  310.702042][T15864] netlink: 8 bytes leftover after parsing attributes in process `syz.3.2593'.
[  310.718886][T15864] netlink: 16 bytes leftover after parsing attributes in process `syz.3.2593'.
[  310.751219][T15864] netlink: 40 bytes leftover after parsing attributes in process `syz.3.2593'.
[  310.821721][T15875] netlink: 'syz.2.2597': attribute type 1 has an invalid length.
[  310.911759][T15886] netlink: 'syz.4.2599': attribute type 6 has an invalid length.
[  310.986882][    C1] IPVS: lc: UDP 224.0.0.2:0 - no destination available
[  311.113439][T15899] netlink: zone id is out of range
[  311.130067][T15899] netlink: zone id is out of range
[  311.135348][T15899] netlink: zone id is out of range
[  311.185183][T15899] netlink: zone id is out of range
[  311.192512][T15907] batadv_slave_0: entered promiscuous mode
[  311.197969][T15906] netlink: del zone limit has 4 unknown bytes
[  311.208544][T15899] netlink: zone id is out of range
[  311.239915][T15899] netlink: zone id is out of range
[  311.265325][T15899] netlink: zone id is out of range
[  311.341861][T15913] netlink: 'syz.3.2608': attribute type 12 has an invalid length.
[  311.439595][T15911] batadv_slave_0: left promiscuous mode
[  311.739938][T15929] netlink: 'syz.0.2610': attribute type 1 has an invalid length.
[  312.037024][    C1] ip6_tunnel: ip6tnl3 xmit: Local address not yet configured!
[  312.057010][T15920] dummy0: left promiscuous mode
[  312.061905][T15920] dummy0: left allmulticast mode
[  312.106669][T15920] wg1: left promiscuous mode
[  312.113355][T15920] wg1: left allmulticast mode
[  312.126232][T15920] wg2: left promiscuous mode
[  312.132241][T15920] wg2: left allmulticast mode
[  312.143648][T15920] bridge_slave_0: left allmulticast mode
[  312.153804][T15920] vlan0: left promiscuous mode
[  312.160255][T15920] mac80211_hwsim hwsim8 wlan0: left promiscuous mode
[  312.169945][T15920] geneve2: left promiscuous mode
[  312.175058][T15920] geneve2: left allmulticast mode
[  312.188983][T15920] veth7: left promiscuous mode
[  312.194602][T15920] bond4: left promiscuous mode
[  312.199967][T15920] bond4: left allmulticast mode
[  312.205665][T15920] veth9: left promiscuous mode
[  312.242070][T15920] batadv0: left allmulticast mode
[  312.263681][T15920] batadv0: left promiscuous mode
[  312.277199][T15920] macvtap0: left promiscuous mode
[  312.284223][T15920] macvtap0: left allmulticast mode
[  312.324603][T15920] batadv1: left allmulticast mode
[  312.553268][T15920] bond6: left promiscuous mode
[  312.562646][T15920] gtp0: left promiscuous mode
[  312.721533][   T69] netdevsim netdevsim2 eth0: unset [0, 0] type 1 family 0 port 8472 - 0
[  312.735194][   T69] netdevsim netdevsim2 eth0: unset [1, 0] type 2 family 0 port 6081 - 0
[  312.749079][   T69] netdevsim netdevsim2 eth1: unset [0, 0] type 1 family 0 port 8472 - 0
[  312.757563][   T69] netdevsim netdevsim2 eth1: unset [1, 0] type 2 family 0 port 6081 - 0
[  312.792571][T15943] bridge0: entered allmulticast mode
[  312.806247][   T69] netdevsim netdevsim2 eth2: unset [0, 0] type 1 family 0 port 8472 - 0
[  312.819981][   T69] netdevsim netdevsim2 eth2: unset [1, 0] type 2 family 0 port 6081 - 0
[  312.831848][   T69] netdevsim netdevsim2 eth3: unset [0, 0] type 1 family 0 port 8472 - 0
[  312.856926][   T69] netdevsim netdevsim2 eth3: unset [1, 0] type 2 family 0 port 6081 - 0
[  313.276053][T15977] sctp: [Deprecated]: syz.2.2622 (pid 15977) Use of int in max_burst socket option deprecated.
[  313.276053][T15977] Use struct sctp_assoc_value instead
[  313.526971][T15987] tipc: Enabled bearer <eth:syzkaller0>, priority 0
[  313.535473][T15987] syzkaller0: entered promiscuous mode
[  313.542423][T15987] syzkaller0: entered allmulticast mode
[  313.561522][T15986] tipc: Resetting bearer <eth:syzkaller0>
[  313.592441][T15986] tipc: Disabling bearer <eth:syzkaller0>
[  313.943692][T16010] tc_dump_action: action bad kind
[  313.964112][T16009] netlink: 'syz.1.2631': attribute type 1 has an invalid length.
[  314.189565][T16018] batadv1: entered promiscuous mode
[  314.195818][T16018] batadv1: entered allmulticast mode
[  314.258867][T16023] vlan4: entered allmulticast mode
[  314.277112][T16023] macvlan0: entered allmulticast mode
[  314.501403][T16038] netlink: 'syz.2.2640': attribute type 10 has an invalid length.
[  314.522276][T16004] Bluetooth: hci1: Opcode 0x0c1a failed: -4
[  314.528709][T16004] Bluetooth: hci1: Error when powering off device on rfkill (-4)
[  314.565697][T16004] Bluetooth: hci3: Opcode 0x0c1a failed: -4
[  314.573117][T16004] Bluetooth: hci3: Error when powering off device on rfkill (-4)
[  314.594484][T16004] Bluetooth: hci2: Opcode 0x0c1a failed: -4
[  314.604458][T16004] Bluetooth: hci2: Error when powering off device on rfkill (-4)
[  314.621700][T16004] Bluetooth: hci4: Opcode 0x0c1a failed: -4
[  314.630915][T16004] Bluetooth: hci4: Error when powering off device on rfkill (-4)
[  314.953170][T16059] __nla_validate_parse: 14 callbacks suppressed
[  314.953187][T16059] netlink: 32 bytes leftover after parsing attributes in process `syz.3.2647'.
[  315.156826][    C1] net_ratelimit: 38 callbacks suppressed
[  315.156843][    C1] IPVS: lc: UDP 224.0.0.2:0 - no destination available
[  315.323611][T16084] netlink: 16 bytes leftover after parsing attributes in process `syz.1.2653'.
[  315.333239][T16084] netlink: 4 bytes leftover after parsing attributes in process `syz.1.2653'.
[  315.374984][T16090] netlink: 16 bytes leftover after parsing attributes in process `syz.1.2653'.
[  315.384844][T16090] netlink: 4 bytes leftover after parsing attributes in process `syz.1.2653'.
[  315.732971][T16105] netlink: 64 bytes leftover after parsing attributes in process `syz.0.2659'.
[  315.744965][T16105] netlink: 64 bytes leftover after parsing attributes in process `syz.0.2659'.
[  315.761637][T16107] netlink: 64 bytes leftover after parsing attributes in process `syz.0.2659'.
[  315.782955][T16107] netlink: 64 bytes leftover after parsing attributes in process `syz.0.2659'.
[  316.103419][T16121] netlink: 'syz.0.2663': attribute type 10 has an invalid length.
[  316.174019][T16124] netlink: 'syz.0.2663': attribute type 10 has an invalid length.
[  316.186874][    C1] IPVS: lc: UDP 224.0.0.2:0 - no destination available
[  316.391157][T16124] dummy0: entered promiscuous mode
[  316.404105][T16121] netlink: 16 bytes leftover after parsing attributes in process `syz.0.2663'.
[  317.153861][ T1299] ieee802154 phy0 wpan0: encryption failed: -22
[  317.226781][    C1] IPVS: lc: UDP 224.0.0.2:0 - no destination available
[  317.537899][T16165] nbd: nbd2 already in use
[  317.549990][T16165] block nbd2: NBD_DISCONNECT
[  317.554630][T16165] block nbd2: Send disconnect failed -32
[  317.580892][T16165] block nbd2: shutting down sockets
[  318.267009][    C1] IPVS: lc: UDP 224.0.0.2:0 - no destination available
[  319.066883][ T9911] page_pool_release_retry() stalled pool shutdown: id 47, 3329 inflight 121 sec
[  319.306861][    C1] IPVS: lc: UDP 224.0.0.2:0 - no destination available
[  320.346876][    C1] IPVS: lc: UDP 224.0.0.2:0 - no destination available
[  320.828144][T16199] bond0: option active_slave: mode dependency failed, not supported in mode balance-rr(0)
[  320.865218][T16202] __nla_validate_parse: 6 callbacks suppressed
[  320.865235][T16202] netlink: 24 bytes leftover after parsing attributes in process `syz.1.2688'.
[  321.034394][T16213] netlink: 308 bytes leftover after parsing attributes in process `syz.4.2692'.
[  321.086276][T16206] netlink: 8 bytes leftover after parsing attributes in process `syz.1.2690'.
[  321.095670][T16213] netlink: 8 bytes leftover after parsing attributes in process `syz.4.2692'.
[  321.169284][T16213] A link change request failed with some changes committed already. Interface vlan0 may have been left with an inconsistent configuration, please check.
[  321.175547][T16221] netlink: 12 bytes leftover after parsing attributes in process `syz.0.2694'.
[  321.386883][    C1] IPVS: lc: UDP 224.0.0.2:0 - no destination available
[  321.490899][T16227] netlink: 'syz.0.2697': attribute type 16 has an invalid length.
[  321.502661][T16227] netlink: 64138 bytes leftover after parsing attributes in process `syz.0.2697'.
[  321.525842][T16227] netlink: 8 bytes leftover after parsing attributes in process `syz.0.2697'.
[  321.966129][T16268] tipc: Enabled bearer <eth:syzkaller0>, priority 0
[  322.001042][T16268] syzkaller0: entered promiscuous mode
[  322.024431][T16268] syzkaller0: entered allmulticast mode
[  322.090962][T16272] netlink: 'syz.2.2712': attribute type 83 has an invalid length.
[  322.130586][T16268] tipc: Resetting bearer <eth:syzkaller0>
[  322.426901][    C1] IPVS: lc: UDP 224.0.0.2:0 - no destination available
[  322.602293][T16298] netlink: 164548 bytes leftover after parsing attributes in process `syz.0.2720'.
[  322.673308][T16262] tipc: Resetting bearer <eth:syzkaller0>
[  322.710460][T16262] tipc: Disabling bearer <eth:syzkaller0>
[  322.983399][T16316] netem: incorrect ge model size
[  323.004895][T16316] netem: change failed
[  323.024536][T16318] netlink: 4 bytes leftover after parsing attributes in process `syz.0.2725'.
[  323.183160][T16318] batman_adv: batadv0: Removing interface: batadv_slave_1
[  323.232507][T16325] netlink: 4 bytes leftover after parsing attributes in process `syz.1.2726'.
[  323.410346][T16337] netlink: 'syz.3.2728': attribute type 12 has an invalid length.
[  323.456032][T16339] netlink: 'syz.0.2730': attribute type 10 has an invalid length.
[  323.466846][    C1] IPVS: lc: UDP 224.0.0.2:0 - no destination available
[  323.495687][T16339] batman_adv: batadv0: Removing interface: batadv_slave_0
[  323.557965][T16346] netlink: 'syz.0.2730': attribute type 10 has an invalid length.
[  323.571997][T16339] batadv_slave_0: entered promiscuous mode
[  323.592789][T16339] bond0: (slave batadv_slave_0): Enslaving as an active interface with an up link
[  323.641129][T16344] netlink: 'syz.1.2732': attribute type 13 has an invalid length.
[  323.717112][T16353] openvswitch: netlink: Flow actions may not be safe on all matching packets.
[  323.811492][T16357] openvswitch: netlink: nsh attribute has 65532 unknown bytes.
[  323.819209][T16355] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium
[  323.820564][T16355] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium
[  323.853555][T16357] openvswitch: netlink: Flow actions may not be safe on all matching packets.
[  323.918145][T16359] netlink: 'syz.3.2737': attribute type 2 has an invalid length.
[  324.238764][T16378] netlink: 'syz.3.2740': attribute type 5 has an invalid length.
[  324.263643][T16378] geneve4: entered promiscuous mode
[  324.296476][T16378] geneve4: entered allmulticast mode
[  324.314827][   T13] netdevsim netdevsim3 eth0: set [1, 0] type 2 family 0 port 256 - 0
[  324.506830][    C1] IPVS: lc: UDP 224.0.0.2:0 - no destination available
[  324.633348][T16397] tc_dump_action: action bad kind
[  324.842401][T16410] IPVS: persistence engine module ip_vs_pe_ not found
[  325.119660][T16421] netlink: 'syz.1.2754': attribute type 11 has an invalid length.
[  325.322046][T16431] netlink: 'syz.4.2757': attribute type 13 has an invalid length.
[  325.415188][T16431] tipc: Resetting bearer <ib:ip6gre0>
[  325.546901][    C1] IPVS: lc: UDP 224.0.0.2:0 - no destination available
[  325.935451][T16474] __nla_validate_parse: 21 callbacks suppressed
[  325.935469][T16474] netlink: 16178 bytes leftover after parsing attributes in process `syz.1.2768'.
[  326.121722][T16485] tipc: Enabled bearer <eth:syzkaller0>, priority 0
[  326.139186][T16371] netdevsim netdevsim3 eth0 (unregistering): unset [1, 0] type 2 family 0 port 256 - 0
[  326.165571][T16485] syzkaller0: entered promiscuous mode
[  326.171447][T16485] syzkaller0: entered allmulticast mode
[  326.216142][T16485] tipc: Resetting bearer <eth:syzkaller0>
[  326.224782][T16487] netlink: 8 bytes leftover after parsing attributes in process `syz.2.2772'.
[  326.271344][T16485] tipc: Resetting bearer <eth:syzkaller0>
[  326.285907][T16485] tipc: Disabling bearer <eth:syzkaller0>
[  326.330315][T16488] netlink: 4 bytes leftover after parsing attributes in process `syz.2.2772'.
[  326.477420][   T13] netdevsim netdevsim3 eth0: set [1, 0] type 2 family 0 port 256 - 0
[  326.596890][    C1] IPVS: lc: UDP 224.0.0.2:0 - no destination available
[  326.675897][ T3457] netdevsim netdevsim3 eth1: set [1, 0] type 2 family 0 port 256 - 0
[  326.711287][ T3457] netdevsim netdevsim3 eth2: set [1, 0] type 2 family 0 port 256 - 0
[  326.735726][T16494] netlink: 212376 bytes leftover after parsing attributes in process `syz.1.2774'.
[  326.766147][ T3457] netdevsim netdevsim3 eth3: set [1, 0] type 2 family 0 port 256 - 0
[  326.858931][T16497] netlink: 12 bytes leftover after parsing attributes in process `syz.0.2776'.
[  326.916906][T16500] bond0: (slave syz_tun): Releasing backup interface
[  326.992364][T16500] bond0: (slave dummy0): Releasing backup interface
[  327.024266][T16500] bond0: (slave wlan1): Releasing backup interface
[  327.045713][T16516] netlink: 'syz.0.2776': attribute type 7 has an invalid length.
[  327.060910][T16500] bond4: (slave veth5): Releasing active interface
[  327.069977][T16516] netlink: 8 bytes leftover after parsing attributes in process `syz.0.2776'.
[  327.101123][T16518] netlink: 'syz.2.2781': attribute type 1 has an invalid length.
[  327.111994][T16500] bond5: (slave ip6gretap2): Removing an active aggregator
[  327.127638][T16500] bond5: (slave ip6gretap2): Releasing backup interface
[  327.135283][T16500] bond5: (slave ip6gretap2): the permanent HWaddr of slave - 2e:bc:23:32:11:d1 - is still in use by bond - set the HWaddr of slave to a different address to avoid conflicts
[  327.183879][T16500] bond5: (slave macvlan2): Releasing backup interface
[  327.200205][T16523] netlink: 4 bytes leftover after parsing attributes in process `syz.2.2781'.
[  327.230042][T16497] vlan2: entered allmulticast mode
[  327.237456][   T43] ip6_tunnel: ip6tnl3 xmit: Local address not yet configured!
[  327.249367][T16497] bond6: entered allmulticast mode
[  327.286130][T16503] sit0: Master is either lo or non-ether device
[  327.576969][T16532] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium
[  327.617408][   T43] ip6_tunnel: ip6tnl3 xmit: Local address not yet configured!
[  327.626807][    C1] IPVS: lc: UDP 224.0.0.2:0 - no destination available
[  327.708808][T16550] netlink: 12 bytes leftover after parsing attributes in process `syz.0.2789'.
[  327.813497][T16552] netlink: 'syz.3.2790': attribute type 1 has an invalid length.
[  327.836148][T16552] netlink: 20 bytes leftover after parsing attributes in process `syz.3.2790'.
[  327.859547][T16552] netlink: 'syz.3.2790': attribute type 1 has an invalid length.
[  327.879365][T16552] netlink: 20 bytes leftover after parsing attributes in process `syz.3.2790'.
[  327.888883][T16552] netlink: 'syz.3.2790': attribute type 1 has an invalid length.
[  327.896633][T16552] netlink: 'syz.3.2790': attribute type 1 has an invalid length.
[  327.957799][T16552] netlink: 'syz.3.2790': attribute type 1 has an invalid length.
[  327.976358][T16552] netlink: 'syz.3.2790': attribute type 1 has an invalid length.
[  327.984267][T16552] netlink: 'syz.3.2790': attribute type 1 has an invalid length.
[  327.992662][T16552] netlink: 'syz.3.2790': attribute type 1 has an invalid length.
[  328.004255][T16552] A link change request failed with some changes committed already. Interface bond0 may have been left with an inconsistent configuration, please check.
[  328.027201][    C1] ip6_tunnel: ip6tnl3 xmit: Local address not yet configured!
[  328.128723][T16562] netem: change failed
[  328.414178][T16579] vxcan1: entered allmulticast mode
[  328.666918][    C1] IPVS: lc: UDP 224.0.0.2:0 - no destination available
[  329.139407][T16594] !
: renamed from dummy0
[  329.295869][T16594] IPVS: lc: UDP 224.0.0.2:0 - no destination available
[  329.377238][T16596] bond0: (slave bond_slave_1): Releasing backup interface
[  329.403257][T16596] bond_slave_1 (unregistering): left promiscuous mode
[  329.706788][    C1] IPVS: lc: UDP 224.0.0.2:0 - no destination available
[  329.748810][T16612] 8021q: adding VLAN 0 to HW filter on device bond9
[  329.822317][T16614] bond9: (slave macvlan3): Error -22 calling dev_set_mtu
[  329.912675][T16621] bond0: (slave syz_tun): Releasing backup interface
[  329.965570][T16621] bond0: (slave team0): Releasing backup interface
[  330.006194][T16621] bond7: (slave geneve3): Releasing active interface
[  330.211680][T16626] bridge0 (unregistering): left allmulticast mode
[  330.746803][    C1] IPVS: lc: UDP 224.0.0.2:0 - no destination available
[  331.136504][T16681] __nla_validate_parse: 17 callbacks suppressed
[  331.136522][T16681] netlink: 8 bytes leftover after parsing attributes in process `syz.4.2821'.
[  331.786798][    C1] IPVS: lc: UDP 224.0.0.2:0 - no destination available
[  332.057946][T16715] netlink: 12 bytes leftover after parsing attributes in process `syz.2.2830'.
[  332.149985][T16715] netlink: 28 bytes leftover after parsing attributes in process `syz.2.2830'.
[  332.357655][T16731] geneve4: entered promiscuous mode
[  332.364017][   T69] netdevsim netdevsim2 eth0: set [1, 0] type 2 family 0 port 6081 - 0
[  332.411045][   T69] netdevsim netdevsim2 eth1: set [1, 0] type 2 family 0 port 6081 - 0
[  332.420129][   T69] netdevsim netdevsim2 eth2: set [1, 0] type 2 family 0 port 6081 - 0
[  332.432764][   T69] netdevsim netdevsim2 eth3: set [1, 0] type 2 family 0 port 6081 - 0
[  332.740125][T16748] syzkaller0: entered promiscuous mode
[  332.762059][T16748] syzkaller0: entered allmulticast mode
[  332.787343][T16748] tipc: Enabled bearer <eth:syzkaller0>, priority 0
[  332.813197][T16750] IPVS: Schedule: port zero only supported in persistent services, check your ipvs configuration
[  332.827121][    C1] IPVS: lc: UDP 224.0.0.2:0 - no destination available
[  332.836526][T16748] sch_tbf: burst 127 is lower than device syzkaller0 mtu (1514) !
[  332.856465][T16748] tipc: Resetting bearer <eth:syzkaller0>
[  332.870102][T16742] tipc: Resetting bearer <eth:syzkaller0>
[  332.894234][T16742] tipc: Disabling bearer <eth:syzkaller0>
[  333.285546][T16775] netlink: 4 bytes leftover after parsing attributes in process `syz.1.2847'.
[  333.585420][T16794] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium
[  333.866765][    C1] IPVS: lc: UDP 224.0.0.2:0 - no destination available
[  333.903016][T16805] nci: __nci_request: wait_for_completion_interruptible_timeout failed -512
[  334.324021][T16820] netlink: 28 bytes leftover after parsing attributes in process `syz.0.2860'.
[  334.349134][T16820] openvswitch: netlink: Flow actions may not be safe on all matching packets.
[  334.570496][ T5872] Bluetooth: hci5: unexpected cc 0x0c03 length: 249 > 1
[  334.581551][ T5872] Bluetooth: hci5: unexpected cc 0x1003 length: 249 > 9
[  334.591288][ T5872] Bluetooth: hci5: unexpected cc 0x1001 length: 249 > 9
[  334.604146][ T5872] Bluetooth: hci5: unexpected cc 0x0c23 length: 249 > 4
[  334.615240][ T5872] Bluetooth: hci5: unexpected cc 0x0c38 length: 249 > 2
[  334.650463][ T5884] Bluetooth: hci5: unexpected cc 0x0c03 length: 249 > 1
[  334.659670][ T5884] Bluetooth: hci5: unexpected cc 0x1003 length: 249 > 9
[  334.678994][ T5884] Bluetooth: hci5: unexpected cc 0x1001 length: 249 > 9
[  334.711029][ T5884] Bluetooth: hci5: unexpected cc 0x0c23 length: 249 > 4
[  334.720832][ T5884] Bluetooth: hci5: unexpected cc 0x0c38 length: 249 > 2
[  334.744075][T16825] netlink: 16186 bytes leftover after parsing attributes in process `syz.1.2858'.
[  334.906771][    C1] IPVS: lc: UDP 224.0.0.2:0 - no destination available
[  335.011071][T16829] netlink: 16 bytes leftover after parsing attributes in process `syz.2.2861'.
[  335.194377][T16835] tipc: Enabled bearer <eth:syzkaller0>, priority 0
[  335.215280][T16835] syzkaller0: entered promiscuous mode
[  335.224332][T16835] syzkaller0: entered allmulticast mode
[  335.274502][T16835] tipc: Resetting bearer <eth:syzkaller0>
[  335.298791][T16834] tipc: Resetting bearer <eth:syzkaller0>
[  335.395481][T16834] tipc: Disabling bearer <eth:syzkaller0>
[  335.603531][T16852] tipc: Enabled bearer <eth:syzkaller0>, priority 0
[  335.715036][T16856] syzkaller0: entered promiscuous mode
[  335.724881][T16856] syzkaller0: entered allmulticast mode
[  335.731799][T16856] tipc: Resetting bearer <eth:syzkaller0>
[  335.769077][T16864] IPVS: length: 8 != 327940644520
[  335.824859][T16864] 8021q: adding VLAN 0 to HW filter on device bond0
[  335.841956][T16864] 8021q: adding VLAN 0 to HW filter on device team0
[  335.859830][T16864] A link change request failed with some changes committed already. Interface caif0 may have been left with an inconsistent configuration, please check.
[  335.860436][T16872] validate_nla: 8 callbacks suppressed
[  335.860449][T16872] netlink: 'syz.1.2874': attribute type 1 has an invalid length.
[  335.893081][T16851] tipc: Resetting bearer <eth:syzkaller0>
[  335.899143][T16872] netlink: 'syz.1.2874': attribute type 1 has an invalid length.
[  335.947073][    C1] IPVS: lc: UDP 224.0.0.2:0 - no destination available
[  336.830592][ T5884] Bluetooth: hci5: command tx timeout
[  336.996844][    C1] IPVS: lc: UDP 224.0.0.2:0 - no destination available
[  337.641212][T16851] tipc: Disabling bearer <eth:syzkaller0>
[  337.665607][T16872] vlan4: entered allmulticast mode
[  337.719832][T16881] netlink: 12 bytes leftover after parsing attributes in process `syz.4.2876'.
[  337.888948][T16888] netlink: 28 bytes leftover after parsing attributes in process `syz.4.2879'.
[  338.036892][    C1] IPVS: lc: UDP 224.0.0.2:0 - no destination available
[  338.038858][T16897] FAULT_INJECTION: forcing a failure.
[  338.038858][T16897] name fail_usercopy, interval 1, probability 0, space 0, times 0
[  338.064467][T16823] chnl_net:caif_netlink_parms(): no params data found
[  338.106883][T16897] CPU: 0 UID: 0 PID: 16897 Comm: syz.2.2880 Not tainted syzkaller #0 PREEMPT(full) 
[  338.106930][T16897] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/12/2025
[  338.106951][T16897] Call Trace:
[  338.106958][T16897]  <TASK>
[  338.106966][T16897]  dump_stack_lvl+0x189/0x250
[  338.106998][T16897]  ? __pfx____ratelimit+0x10/0x10
[  338.107014][T16897]  ? __pfx_dump_stack_lvl+0x10/0x10
[  338.107033][T16897]  ? __pfx__printk+0x10/0x10
[  338.107054][T16897]  ? __might_fault+0xb0/0x130
[  338.107087][T16897]  should_fail_ex+0x414/0x560
[  338.107114][T16897]  _copy_from_iter+0x1de/0x1790
[  338.107146][T16897]  ? __lock_acquire+0xab9/0xd20
[  338.107174][T16897]  ? __pfx__copy_from_iter+0x10/0x10
[  338.107209][T16897]  tun_get_user+0x219/0x3e20
[  338.107247][T16897]  ? aa_file_perm+0x44d/0x1550
[  338.107265][T16897]  ? __pfx_tun_get_user+0x10/0x10
[  338.107282][T16897]  ? _parse_integer_limit+0x1ae/0x1f0
[  338.107314][T16897]  ? __lock_acquire+0xab9/0xd20
[  338.107340][T16897]  ? ref_tracker_alloc+0x318/0x460
[  338.107359][T16897]  ? __lock_acquire+0xab9/0xd20
[  338.107382][T16897]  ? __pfx_ref_tracker_alloc+0x10/0x10
[  338.107409][T16897]  ? tun_get+0x1c/0x2f0
[  338.107433][T16897]  ? tun_get+0x1c/0x2f0
[  338.107450][T16897]  ? tun_get+0x1c/0x2f0
[  338.107471][T16897]  tun_chr_write_iter+0x113/0x200
[  338.107492][T16897]  vfs_write+0x5c6/0xb30
[  338.107519][T16897]  ? __pfx_tun_chr_write_iter+0x10/0x10
[  338.107537][T16897]  ? __pfx_vfs_write+0x10/0x10
[  338.107569][T16897]  ? __fget_files+0x2a/0x420
[  338.107594][T16897]  ksys_write+0x145/0x250
[  338.107617][T16897]  ? __pfx_ksys_write+0x10/0x10
[  338.107643][T16897]  ? do_syscall_64+0xbe/0x3b0
[  338.107664][T16897]  do_syscall_64+0xfa/0x3b0
[  338.107680][T16897]  ? lockdep_hardirqs_on+0x9c/0x150
[  338.107697][T16897]  ? entry_SYSCALL_64_after_hwframe+0x77/0x7f
[  338.107713][T16897]  ? clear_bhb_loop+0x60/0xb0
[  338.107734][T16897]  entry_SYSCALL_64_after_hwframe+0x77/0x7f
[  338.107750][T16897] RIP: 0033:0x7f085a38ebe9
[  338.107766][T16897] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48
[  338.107781][T16897] RSP: 002b:00007f085b13a038 EFLAGS: 00000246 ORIG_RAX: 0000000000000001
[  338.107799][T16897] RAX: ffffffffffffffda RBX: 00007f085a5c6090 RCX: 00007f085a38ebe9
[  338.107812][T16897] RDX: 0000000000000046 RSI: 0000200000000300 RDI: 0000000000000003
[  338.107823][T16897] RBP: 00007f085b13a090 R08: 0000000000000000 R09: 0000000000000000
[  338.107834][T16897] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001
[  338.107845][T16897] R13: 00007f085a5c6128 R14: 00007f085a5c6090 R15: 00007fffda93b208
[  338.107875][T16897]  </TASK>
[  338.379723][T16899] bond3: (slave erspan0): Releasing active interface
[  338.393703][T16899] ip6gretap1: entered promiscuous mode
[  338.587909][T16899] bond0: left promiscuous mode
[  338.736859][T16899] mac80211_hwsim hwsim11 wlan1: left promiscuous mode
[  338.763414][T16899] team0: Port device bond0 removed
[  338.781477][T16899] bond5: (slave wlan0): Releasing active interface
[  338.791164][T16899] bond0: (slave wlan1): Releasing backup interface
[  338.800007][T16899] bond1: (slave bridge2): Removing an active aggregator
[  338.818048][T16899] bond1: (slave bridge2): Releasing backup interface
[  338.828719][T16899] bond2: (slave geneve3): Releasing active interface
[  338.843409][T16899] bond3: (slave ip6gretap1): Releasing active interface
[  338.876775][T16899] bond3: (slave ip6gretap1): the permanent HWaddr of slave - da:fb:93:5a:4e:64 - is still in use by bond - set the HWaddr of slave to a different address to avoid conflicts
[  338.914659][T16899] ip6gretap1: left promiscuous mode
[  338.922189][ T5884] Bluetooth: hci5: command tx timeout
[  338.997670][T16899] bond3: (slave veth5): Releasing active interface
[  339.061219][T16899] bridge5: left promiscuous mode
[  339.066954][    C1] IPVS: lc: UDP 224.0.0.2:0 - no destination available
[  339.074871][T16899] team0: Port device bridge5 removed
[  339.164062][T16906] team0: Mode changed to "activebackup"
[  339.251388][T16915] openvswitch: netlink: IP tunnel dst address not specified
[  339.363008][T16923] netlink: 'syz.2.2886': attribute type 9 has an invalid length.
[  339.397274][T16923] netlink: 'syz.2.2886': attribute type 7 has an invalid length.
[  339.412692][T16823] bridge0: port 1(bridge_slave_0) entered blocking state
[  339.430771][T16823] bridge0: port 1(bridge_slave_0) entered disabled state
[  339.440014][T16923] netlink: 'syz.2.2886': attribute type 8 has an invalid length.
[  339.452312][T16823] bridge_slave_0: entered allmulticast mode
[  339.460366][T16823] bridge_slave_0: entered promiscuous mode
[  339.468817][T16930] netlink: 8 bytes leftover after parsing attributes in process `syz.1.2888'.
[  339.477117][T16929] netlink: 8 bytes leftover after parsing attributes in process `syz.1.2888'.
[  339.491244][T16823] bridge0: port 2(bridge_slave_1) entered blocking state
[  339.501986][T16930] netlink: 4 bytes leftover after parsing attributes in process `syz.1.2888'.
[  339.515763][T16823] bridge0: port 2(bridge_slave_1) entered disabled state
[  339.523232][T16919] Bluetooth: hci0: Opcode 0x0c03 failed: -4
[  339.525215][T16823] bridge_slave_1: entered allmulticast mode
[  339.541780][T16823] bridge_slave_1: entered promiscuous mode
[  339.566031][T16924] netlink: 8 bytes leftover after parsing attributes in process `syz.0.2883'.
[  339.595595][T16929] netlink: 4 bytes leftover after parsing attributes in process `syz.1.2888'.
[  340.001555][T16823] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link
[  340.022531][T16823] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link
[  340.106983][    C1] IPVS: lc: UDP 224.0.0.2:0 - no destination available
[  340.374674][T16823] team0: Port device team_slave_0 added
[  340.394257][T16823] team0: Port device team_slave_1 added
[  340.424876][T16960] netlink: 40 bytes leftover after parsing attributes in process `syz.2.2893'.
[  340.442529][T16960] netlink: 24 bytes leftover after parsing attributes in process `syz.2.2893'.
[  340.521040][T16823] batman_adv: batadv0: Adding interface: batadv_slave_0
[  340.532984][T16823] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem.
[  340.559565][T16968] netlink: 'syz.1.2896': attribute type 1 has an invalid length.
[  340.561359][T16823] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active
[  340.572639][T16971] netlink: 52 bytes leftover after parsing attributes in process `syz.1.2896'.
[  340.698395][T16823] batman_adv: batadv0: Adding interface: batadv_slave_1
[  340.705371][T16823] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem.
[  340.731835][T16823] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active
[  340.930679][T16823] hsr_slave_0: entered promiscuous mode
[  340.944499][T16823] hsr_slave_1: entered promiscuous mode
[  340.952253][T16823] debugfs: 'hsr0' already exists in 'hsr'
[  340.960379][T16823] Cannot create hsr debugfs directory
[  340.987071][ T5884] Bluetooth: hci5: command tx timeout
[  341.071092][T16994] tipc: Enabling of bearer <eth:syzkaller0> rejected, max 3 bearers permitted
[  341.111409][T16994] syzkaller0: entered promiscuous mode
[  341.121594][T16994] syzkaller0: entered allmulticast mode
[  341.146878][    C1] IPVS: lc: UDP 224.0.0.2:0 - no destination available
[  341.315211][T16823] netdevsim netdevsim3 eth3 (unregistering): unset [1, 0] type 2 family 0 port 256 - 0
[  341.347450][T16996] sctp: [Deprecated]: syz.4.2903 (pid 16996) Use of struct sctp_assoc_value in delayed_ack socket option.
[  341.347450][T16996] Use struct sctp_sack_info instead
[  341.439053][T16823] netdevsim netdevsim3 eth2 (unregistering): unset [1, 0] type 2 family 0 port 256 - 0
[  341.515318][T16823] netdevsim netdevsim3 eth1 (unregistering): unset [1, 0] type 2 family 0 port 256 - 0
[  341.704603][T17003] veth0_to_team: left promiscuous mode
[  341.727257][T17003] veth0_to_team: left allmulticast mode
[  341.760265][T17003] gretap3: left allmulticast mode
[  341.815830][T17003] veth7: left promiscuous mode
[  341.837278][T17003] batman_adv: batadv0: Interface deactivated: ip6gretap1
[  341.904637][T16823] netdevsim netdevsim3 eth0 (unregistering): unset [1, 0] type 2 family 0 port 256 - 0
[  342.196877][    C1] IPVS: lc: UDP 224.0.0.2:0 - no destination available
[  342.501594][T16823] netdevsim netdevsim3 netdevsim0: renamed from eth0
[  342.533217][T16823] netdevsim netdevsim3 netdevsim1: renamed from eth1
[  342.562003][T16823] netdevsim netdevsim3 netdevsim2: renamed from eth2
[  342.575528][T17049] netlink: 'syz.0.2917': attribute type 1 has an invalid length.
[  342.590263][T17048] syz_tun: entered allmulticast mode
[  342.631042][T16823] netdevsim netdevsim3 netdevsim3: renamed from eth3
[  342.655077][T17048] dvmrp8: entered allmulticast mode
[  342.662479][T17058] batman_adv: batadv0: Adding interface: dummy0
[  342.668990][T17058] batman_adv: batadv0: The MTU of interface dummy0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem.
[  342.695105][T17058] batman_adv: batadv0: Not using interface dummy0 (retrying later): interface not active
[  342.726957][T17048] netlink: 'syz.4.2916': attribute type 23 has an invalid length.
[  342.821095][T17046] syz_tun: left allmulticast mode
[  342.838720][T17046] dvmrp8: left allmulticast mode
[  343.049317][T17078] bridge0: port 1(veth0_to_team) entered blocking state
[  343.057658][T17078] bridge0: port 1(veth0_to_team) entered disabled state
[  343.065971][T17078] veth0_to_team: entered allmulticast mode
[  343.077708][ T5884] Bluetooth: hci5: command tx timeout
[  343.081825][T17078] veth0_to_team: entered promiscuous mode
[  343.116269][T17083] tipc: Enabling of bearer <eth:syzkaller0> rejected, max 3 bearers permitted
[  343.142034][T16823] 8021q: adding VLAN 0 to HW filter on device bond0
[  343.164152][T17083] syzkaller0: entered promiscuous mode
[  343.202243][T17083] syzkaller0: entered allmulticast mode
[  343.226914][    C1] IPVS: lc: UDP 224.0.0.2:0 - no destination available
[  343.250340][T16823] 8021q: adding VLAN 0 to HW filter on device team0
[  343.272256][T17083] sch_tbf: burst 127 is lower than device syzkaller0 mtu (1514) !
[  343.303536][T17097] syz.2.2928 uses old SIOCAX25GETINFO
[  343.315624][T17093] ieee802154 phy0 wpan0: encryption failed: -22
[  343.324577][   T69] bridge0: port 1(bridge_slave_0) entered blocking state
[  343.331788][   T69] bridge0: port 1(bridge_slave_0) entered forwarding state
[  343.358923][   T69] bridge0: port 2(bridge_slave_1) entered blocking state
[  343.366111][   T69] bridge0: port 2(bridge_slave_1) entered forwarding state
[  343.382076][T17097] openvswitch: netlink: IP tunnel attribute has 16 unknown bytes.
[  343.392853][T17097] __nla_validate_parse: 3 callbacks suppressed
[  343.392868][T17097] netlink: 8 bytes leftover after parsing attributes in process `syz.2.2928'.
[  343.397096][T17083] sch_tbf: burst 4 is lower than device syzkaller0 mtu (1514) !
[  343.423639][T17097] netlink: 8 bytes leftover after parsing attributes in process `syz.2.2928'.
[  343.665214][T17105] netlink: 8 bytes leftover after parsing attributes in process `syz.2.2929'.
[  343.713370][T17105] netlink: 'syz.2.2929': attribute type 1 has an invalid length.
[  343.741257][T17105] netlink: 224 bytes leftover after parsing attributes in process `syz.2.2929'.
[  343.806272][T17105] netlink: 'syz.2.2929': attribute type 3 has an invalid length.
[  343.814631][T17105] netlink: 666 bytes leftover after parsing attributes in process `syz.2.2929'.
[  343.998565][T17121] netlink: 8 bytes leftover after parsing attributes in process `syz.4.2933'.
[  344.028145][T17121] netlink: 8 bytes leftover after parsing attributes in process `syz.4.2933'.
[  344.082234][T16823] 8021q: adding VLAN 0 to HW filter on device batadv0
[  344.091796][T17126] netlink: 72 bytes leftover after parsing attributes in process `syz.1.2935'.
[  344.223378][T16823] veth0_vlan: entered promiscuous mode
[  344.255092][T16823] veth1_vlan: entered promiscuous mode
[  344.266889][    C1] IPVS: lc: UDP 224.0.0.2:0 - no destination available
[  344.367199][T16823] veth0_macvtap: entered promiscuous mode
[  344.477799][T16823] veth1_macvtap: entered promiscuous mode
[  344.623075][T16823] batman_adv: batadv0: Interface activated: batadv_slave_0
[  344.681161][T16823] batman_adv: batadv0: Interface activated: batadv_slave_1
[  344.754549][   T13] netdevsim netdevsim3 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0
[  344.801327][T17145] netlink: 5636 bytes leftover after parsing attributes in process `syz.1.2938'.
[  344.871349][   T13] netdevsim netdevsim3 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0
[  344.885371][   T13] netdevsim netdevsim3 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0
[  344.920385][T17143] syzkaller0: entered promiscuous mode
[  344.927618][T17143] syzkaller0: entered allmulticast mode
[  344.962487][   T13] netdevsim netdevsim3 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0
[  345.307081][    C1] IPVS: lc: UDP 224.0.0.2:0 - no destination available
[  345.527350][T17170] netlink: 16 bytes leftover after parsing attributes in process `syz.0.2945'.
[  345.590872][T17176] netlink: 'syz.0.2945': attribute type 1 has an invalid length.
[  345.620361][T17164] syzkaller1: entered promiscuous mode
[  345.626088][T17164] syzkaller1: entered allmulticast mode
[  345.656431][ T3457] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50
[  345.664727][ T3457] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50
[  345.699124][   T49] netdevsim netdevsim4 eth0: set [0, 0] type 1 family 0 port 8472 - 0
[  345.772220][T17170] syzkaller0: entered promiscuous mode
[  345.799088][T17170] syzkaller0: entered allmulticast mode
[  345.819976][   T49] netdevsim netdevsim4 eth1: set [0, 0] type 1 family 0 port 8472 - 0
[  345.840100][   T49] netdevsim netdevsim4 eth2: set [0, 0] type 1 family 0 port 8472 - 0
[  345.911271][   T49] netdevsim netdevsim4 eth3: set [0, 0] type 1 family 0 port 8472 - 0
[  345.937972][   T69] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50
[  345.966831][   T69] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50
[  346.138474][T17196] syzkaller1: entered allmulticast mode
[  346.249350][T17202] netlink: 'syz.4.2953': attribute type 1 has an invalid length.
[  346.346932][    C1] IPVS: lc: UDP 224.0.0.2:0 - no destination available
[  346.383939][T17207] tipc: Enabling of bearer <eth:syzkaller0> rejected, max 3 bearers permitted
[  346.411401][T17207] veth1_macvtap: left promiscuous mode
[  346.423918][T17207] veth1_macvtap: entered promiscuous mode
[  346.450760][T17208] veth0_vlan: entered allmulticast mode
[  346.807457][ T5872] Bluetooth: hci2: unexpected cc 0x0c03 length: 249 > 1
[  346.817684][ T5872] Bluetooth: hci2: unexpected cc 0x1003 length: 249 > 9
[  346.825858][ T5872] Bluetooth: hci2: unexpected cc 0x1001 length: 249 > 9
[  346.848080][ T5872] Bluetooth: hci2: unexpected cc 0x0c23 length: 249 > 4
[  346.861055][ T5872] Bluetooth: hci2: unexpected cc 0x0c38 length: 249 > 2
[  347.034803][T17231] openvswitch: netlink: nsh attribute has 65532 unknown bytes.
[  347.061445][T17231] openvswitch: netlink: Flow actions may not be safe on all matching packets.
[  347.386950][    C1] IPVS: lc: UDP 224.0.0.2:0 - no destination available
[  347.624927][T17251] mac80211_hwsim hwsim5 wlan1: (WE) : Wireless Event (cmd=0x8B1A) too big (33)
[  347.851411][T17260] tipc: Enabling of bearer <eth:syzkaller0> rejected, max 3 bearers permitted
[  347.866309][T17260] syzkaller0: entered promiscuous mode
[  347.874696][T17260] syzkaller0: entered allmulticast mode
[  347.925509][T17223] chnl_net:caif_netlink_parms(): no params data found
[  348.211803][T17223] bridge0: port 1(bridge_slave_0) entered blocking state
[  348.222576][T17223] bridge0: port 1(bridge_slave_0) entered disabled state
[  348.230075][T17223] bridge_slave_0: entered allmulticast mode
[  348.237955][T17223] bridge_slave_0: entered promiscuous mode
[  348.275962][T17276] macvtap0: entered allmulticast mode
[  348.281927][T17276] mac80211_hwsim hwsim4 wlan0: entered allmulticast mode
[  348.302312][T17276] mac80211_hwsim hwsim4 wlan0: left allmulticast mode
[  348.334913][T17223] bridge0: port 2(bridge_slave_1) entered blocking state
[  348.342235][T17223] bridge0: port 2(bridge_slave_1) entered disabled state
[  348.350402][T17223] bridge_slave_1: entered allmulticast mode
[  348.358378][T17223] bridge_slave_1: entered promiscuous mode
[  348.426919][    C1] IPVS: lc: UDP 224.0.0.2:0 - no destination available
[  348.431087][T17223] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link
[  348.446583][T17223] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link
[  348.550685][T17290] geneve4: entered promiscuous mode
[  348.572243][T17290] geneve4: entered allmulticast mode
[  348.634067][T17223] team0: Port device team_slave_0 added
[  348.658928][T17223] team0: Port device team_slave_1 added
[  348.744450][T17300] __nla_validate_parse: 11 callbacks suppressed
[  348.744468][T17300] netlink: 12 bytes leftover after parsing attributes in process `syz.3.2979'.
[  348.769377][ T3457] netdevsim netdevsim4 eth0: set [1, 0] type 2 family 0 port 19999 - 0
[  348.774043][T17301] ieee802154 phy0 wpan0: encryption failed: -22
[  348.778123][ T3457] netdevsim netdevsim4 eth1: set [1, 0] type 2 family 0 port 19999 - 0
[  348.857939][ T3457] netdevsim netdevsim4 eth2: set [1, 0] type 2 family 0 port 19999 - 0
[  348.880247][T17305] tipc: Bearer <udp:syz0>: already 2 bearers with priority 10
[  348.891870][T17305] tipc: Bearer <udp:syz0>: trying with adjusted priority
[  348.902595][T17305] tipc: Enabling of bearer <udp:syz0> rejected, max 3 bearers permitted
[  348.911073][ T5884] Bluetooth: hci2: command tx timeout
[  348.919471][T17223] batman_adv: batadv0: Adding interface: batadv_slave_0
[  348.926422][T17223] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem.
[  348.957704][T17223] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active
[  348.973429][ T3457] netdevsim netdevsim4 eth3: set [1, 0] type 2 family 0 port 19999 - 0
[  349.005806][T17223] batman_adv: batadv0: Adding interface: batadv_slave_1
[  349.013179][T17223] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem.
[  349.040620][T17223] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active
[  349.156319][T17313] netlink: 12 bytes leftover after parsing attributes in process `syz.2.2984'.
[  349.165820][T17313] tc_dump_action: action bad kind
[  349.358004][T17223] hsr_slave_0: entered promiscuous mode
[  349.364786][T17223] hsr_slave_1: entered promiscuous mode
[  349.397212][T17223] debugfs: 'hsr0' already exists in 'hsr'
[  349.402976][T17223] Cannot create hsr debugfs directory
[  349.466952][    C1] IPVS: lc: UDP 224.0.0.2:0 - no destination available
[  349.599918][T17325] tipc: Started in network mode
[  349.604877][T17325] tipc: Node identity 2a26fcbbf306, cluster identity 4711
[  349.612490][T17325] tipc: Enabled bearer <eth:syzkaller0>, priority 0
[  349.621382][T17325] syzkaller0: entered promiscuous mode
[  349.627543][T17325] syzkaller0: entered allmulticast mode
[  349.644306][T17327] dvmrp0: entered allmulticast mode
[  349.667106][T17326] dvmrp0: left allmulticast mode
[  349.749587][T17325] tipc: Resetting bearer <eth:syzkaller0>
[  349.767434][T17324] tipc: Resetting bearer <eth:syzkaller0>
[  349.833121][T17324] tipc: Disabling bearer <eth:syzkaller0>
[  349.983147][T17340] Bluetooth: hci4: Opcode 0x0401 failed: -22
[  350.005319][ T9919] IPVS: starting estimator thread 0...
[  350.041172][T17223] netdevsim netdevsim1 eth3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[  350.074491][T17340] lo: entered allmulticast mode
[  350.097388][T17349] dvmrp8: entered allmulticast mode
[  350.105442][T17342] IPVS: sed: SCTP 172.20.20.187:0 - no destination available
[  350.113877][T17344] IPVS: using max 26 ests per chain, 62400 per kthread
[  350.144230][T17223] netdevsim netdevsim1 eth2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[  350.194297][T17340] lo: left allmulticast mode
[  350.207470][T17340] dvmrp8: left allmulticast mode
[  350.296407][T17223] netdevsim netdevsim1 eth1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[  350.446632][T17223] netdevsim netdevsim1 eth0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[  350.506912][    C1] IPVS: lc: UDP 224.0.0.2:0 - no destination available
[  350.719964][T17372] sctp: [Deprecated]: syz.0.3000 (pid 17372) Use of int in max_burst socket option deprecated.
[  350.719964][T17372] Use struct sctp_assoc_value instead
[  350.880508][T17370] netlink: 'syz.2.3001': attribute type 21 has an invalid length.
[  350.934354][T17376] netlink: 8 bytes leftover after parsing attributes in process `syz.2.3001'.
[  350.981298][T17376] netlink: 24 bytes leftover after parsing attributes in process `syz.2.3001'.
[  350.992430][ T5884] Bluetooth: hci2: command tx timeout
[  351.250746][T17390] netlink: 44 bytes leftover after parsing attributes in process `syz.3.3006'.
[  351.547957][    C1] IPVS: lc: UDP 224.0.0.2:0 - no destination available
[  352.027641][ T5884] Bluetooth: hci4: command tx timeout
[  352.588936][    C1] IPVS: lc: UDP 224.0.0.2:0 - no destination available
[  352.771881][T17396] netlink: 44 bytes leftover after parsing attributes in process `syz.3.3007'.
[  352.781084][T17396] netlink: 24 bytes leftover after parsing attributes in process `syz.3.3007'.
[  352.813574][T17223] netdevsim netdevsim1 netdevsim0: renamed from eth0
[  352.890270][T17223] netdevsim netdevsim1 netdevsim1: renamed from eth1
[  352.931306][T17223] netdevsim netdevsim1 netdevsim2: renamed from eth2
[  352.960433][T17401] syzkaller0: entered promiscuous mode
[  352.966059][T17401] syzkaller0: entered allmulticast mode
[  353.014678][T17223] netdevsim netdevsim1 netdevsim3: renamed from eth3
[  353.067185][ T5884] Bluetooth: hci2: command tx timeout
[  353.345595][T17429] netlink: 8 bytes leftover after parsing attributes in process `syz.3.3013'.
[  353.405144][T17433] netlink: 56 bytes leftover after parsing attributes in process `syz.4.3015'.
[  353.415687][T17433] netlink: 8 bytes leftover after parsing attributes in process `syz.4.3015'.
[  353.416516][T17429] veth1: entered promiscuous mode
[  353.434721][T17429] netlink: 'syz.3.3013': attribute type 8 has an invalid length.
[  353.443977][T17429] A link change request failed with some changes committed already. Interface veth1 may have been left with an inconsistent configuration, please check.
[  353.602069][T17223] 8021q: adding VLAN 0 to HW filter on device bond0
[  353.623913][T17438] netlink: 'syz.3.3017': attribute type 2 has an invalid length.
[  353.636941][    C1] IPVS: lc: UDP 224.0.0.2:0 - no destination available
[  353.688873][T17223] 8021q: adding VLAN 0 to HW filter on device team0
[  353.696378][T17440] netlink: 'syz.2.3018': attribute type 1 has an invalid length.
[  353.723352][   T49] bridge0: port 1(bridge_slave_0) entered blocking state
[  353.730560][   T49] bridge0: port 1(bridge_slave_0) entered forwarding state
[  353.758354][   T13] bridge0: port 2(bridge_slave_1) entered blocking state
[  353.765549][   T13] bridge0: port 2(bridge_slave_1) entered forwarding state
[  353.799628][T17447] bond0: option resend_igmp: invalid value (4096)
[  353.806212][T17447] bond0: option resend_igmp: allowed values 0 - 255
[  353.866763][    C1] 
[  353.869118][    C1] ================================
[  353.874211][    C1] WARNING: inconsistent lock state
[  353.879747][    C1] syzkaller #0 Not tainted
[  353.884140][    C1] --------------------------------
[  353.889226][    C1] inconsistent {SOFTIRQ-ON-W} -> {IN-SOFTIRQ-W} usage.
[  353.896051][    C1] modprobe/17453 [HC0[0]:SC1[1]:HE1:SE0] takes:
[  353.902300][    C1] ffff88805a4ad8a8 (&p->tcfa_lock){+.?.}-{3:3}, at: est_timer+0xd4/0x9f0
[  353.910733][    C1] {SOFTIRQ-ON-W} state was registered at:
[  353.916524][    C1]   lock_acquire+0x120/0x360
[  353.921105][    C1]   _raw_spin_lock+0x2e/0x40
[  353.925687][    C1]   tcf_ct_init+0x7cc/0x1950
[  353.930262][    C1]   tcf_action_init_1+0x460/0x6d0
[  353.935273][    C1]   tcf_action_init+0x2cf/0xab0
[  353.940109][    C1]   tc_ctl_action+0x430/0xbd0
[  353.944771][    C1]   rtnetlink_rcv_msg+0x779/0xb70
[  353.949776][    C1]   netlink_rcv_skb+0x208/0x470
[  353.954617][    C1]   netlink_unicast+0x82c/0x9e0
[  353.959452][    C1]   netlink_sendmsg+0x805/0xb30
[  353.964284][    C1]   __sock_sendmsg+0x21c/0x270
[  353.969045][    C1]   ____sys_sendmsg+0x505/0x830
[  353.973887][    C1]   ___sys_sendmsg+0x21f/0x2a0
[  353.978674][    C1]   __x64_sys_sendmsg+0x19b/0x260
[  353.983681][    C1]   do_syscall_64+0xfa/0x3b0
[  353.988255][    C1]   entry_SYSCALL_64_after_hwframe+0x77/0x7f
[  353.994219][    C1] irq event stamp: 1890
[  353.998354][    C1] hardirqs last  enabled at (1890): [<ffffffff8b7cceb3>] _raw_spin_unlock_irq+0x23/0x50
[  354.008061][    C1] hardirqs last disabled at (1889): [<ffffffff8b7ccc2d>] _raw_spin_lock_irq+0x7d/0xf0
[  354.017593][    C1] softirqs last  enabled at (438): [<ffffffff8184f4da>] __irq_exit_rcu+0xca/0x1f0
[  354.026780][    C1] softirqs last disabled at (1887): [<ffffffff8184f4da>] __irq_exit_rcu+0xca/0x1f0
[  354.036048][    C1] 
[  354.036048][    C1] other info that might help us debug this:
[  354.044084][    C1]  Possible unsafe locking scenario:
[  354.044084][    C1] 
[  354.051523][    C1]        CPU0
[  354.054782][    C1]        ----
[  354.058042][    C1]   lock(&p->tcfa_lock);
[  354.062270][    C1]   <Interrupt>
[  354.065702][    C1]     lock(&p->tcfa_lock);
[  354.070100][    C1] 
[  354.070100][    C1]  *** DEADLOCK ***
[  354.070100][    C1] 
[  354.078223][    C1] 2 locks held by modprobe/17453:
[  354.083231][    C1]  #0: ffff888029702220 (&mm->mmap_lock){++++}-{4:4}, at: vm_mmap_pgoff+0x211/0x4d0
[  354.092629][    C1]  #1: ffffc90000a08be0 ((&est->timer)){+.-.}-{0:0}, at: call_timer_fn+0xbe/0x5f0
[  354.101857][    C1] 
[  354.101857][    C1] stack backtrace:
[  354.107735][    C1] CPU: 1 UID: 0 PID: 17453 Comm: modprobe Not tainted syzkaller #0 PREEMPT(full) 
[  354.107755][    C1] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/12/2025
[  354.107764][    C1] Call Trace:
[  354.107770][    C1]  <IRQ>
[  354.107776][    C1]  dump_stack_lvl+0x189/0x250
[  354.107796][    C1]  ? __pfx_dump_stack_lvl+0x10/0x10
[  354.107812][    C1]  ? __pfx__printk+0x10/0x10
[  354.107832][    C1]  ? print_lock_name+0xde/0x100
[  354.107851][    C1]  print_usage_bug+0x297/0x2e0
[  354.107865][    C1]  valid_state+0xc3/0xf0
[  354.107878][    C1]  mark_lock_irq+0x36/0x390
[  354.107890][    C1]  ? psi_group_change+0xab8/0x1050
[  354.107907][    C1]  mark_lock+0x11b/0x190
[  354.107920][    C1]  __lock_acquire+0x680/0xd20
[  354.107942][    C1]  ? est_timer+0xd4/0x9f0
[  354.107960][    C1]  lock_acquire+0x120/0x360
[  354.107978][    C1]  ? est_timer+0xd4/0x9f0
[  354.107998][    C1]  ? register_lock_class+0x51/0x320
[  354.108019][    C1]  _raw_spin_lock+0x2e/0x40
[  354.108038][    C1]  ? est_timer+0xd4/0x9f0
[  354.108056][    C1]  est_timer+0xd4/0x9f0
[  354.108076][    C1]  ? call_timer_fn+0xbe/0x5f0
[  354.108095][    C1]  ? call_timer_fn+0xbe/0x5f0
[  354.108113][    C1]  ? __pfx_est_timer+0x10/0x10
[  354.108134][    C1]  call_timer_fn+0x17e/0x5f0
[  354.108153][    C1]  ? __pfx_est_timer+0x10/0x10
[  354.108170][    C1]  ? call_timer_fn+0xbe/0x5f0
[  354.108189][    C1]  ? __pfx_call_timer_fn+0x10/0x10
[  354.108210][    C1]  ? _raw_spin_unlock_irq+0x23/0x50
[  354.108229][    C1]  ? lockdep_hardirqs_on+0x9c/0x150
[  354.108242][    C1]  ? __pfx_est_timer+0x10/0x10
[  354.108261][    C1]  __run_timer_base+0x61a/0x860
[  354.108278][    C1]  ? ktime_get+0x3e/0x1f0
[  354.108296][    C1]  ? __pfx___run_timer_base+0x10/0x10
[  354.108313][    C1]  ? seqcount_lockdep_reader_access+0x15f/0x1c0
[  354.108334][    C1]  run_timer_softirq+0xb7/0x180
[  354.108353][    C1]  handle_softirqs+0x283/0x870
[  354.108368][    C1]  ? __irq_exit_rcu+0xca/0x1f0
[  354.108383][    C1]  ? __pfx_handle_softirqs+0x10/0x10
[  354.108400][    C1]  __irq_exit_rcu+0xca/0x1f0
[  354.108412][    C1]  ? __pfx___irq_exit_rcu+0x10/0x10
[  354.108428][    C1]  irq_exit_rcu+0x9/0x30
[  354.108440][    C1]  sysvec_apic_timer_interrupt+0xa6/0xc0
[  354.108461][    C1]  </IRQ>
[  354.108466][    C1]  <TASK>
[  354.108471][    C1]  asm_sysvec_apic_timer_interrupt+0x1a/0x20
[  354.108486][    C1] RIP: 0010:__sanitizer_cov_trace_pc+0x8/0x70
[  354.108505][    C1] Code: 8b 3d 64 79 fe 0b 48 89 de 5b e9 c3 9f 58 00 cc cc cc 90 90 90 90 90 90 90 90 90 90 90 90 90 90 90 90 f3 0f 1e fa 48 8b 04 24 <65> 48 8b 0c 25 08 c0 a0 92 65 8b 15 88 14 e1 10 81 e2 00 01 ff 00
[  354.108517][    C1] RSP: 0018:ffffc9000b667118 EFLAGS: 00000286
[  354.108530][    C1] RAX: ffffffff8b731bc9 RBX: ffff888029702080 RCX: ffff888042930000
[  354.108541][    C1] RDX: 0000000000000000 RSI: 0000000000000001 RDI: 0000000000000000
[  354.108550][    C1] RBP: ffffc9000b6672f0 R08: ffff888042930000 R09: 0000000000000004
[  354.108559][    C1] R10: 0000000000000003 R11: 0000000000000000 R12: ffff88807dfdc3c0
[  354.108569][    C1] R13: dffffc0000000000 R14: 0000000000000001 R15: 0000000000000300
[  354.108581][    C1]  ? mt_validate+0x3e49/0x4380
[  354.108604][    C1]  mt_validate+0x3e49/0x4380
[  354.108622][    C1]  ? __pfx_mt_validate+0x10/0x10
[  354.108638][    C1]  ? trace_ma_write+0x87/0x1f0
[  354.108659][    C1]  ? uprobe_mmap+0x177/0x1020
[  354.108677][    C1]  validate_mm+0xb6/0x4b0
[  354.108693][    C1]  ? __pfx_validate_mm+0x10/0x10
[  354.108708][    C1]  ? __pfx_uprobe_mmap+0x10/0x10
[  354.108721][    C1]  ? vma_complete+0x9e7/0xae0
[  354.108735][    C1]  ? vma_prepare+0x485/0x4b0
[  354.108748][    C1]  ? vma_adjust_trans_huge+0x286/0x370
[  354.108769][    C1]  __split_vma+0x8bd/0xa00
[  354.108788][    C1]  ? __pfx___split_vma+0x10/0x10
[  354.108807][    C1]  ? mas_find+0xb0e/0xd30
[  354.108821][    C1]  vms_gather_munmap_vmas+0x4ce/0x12f0
[  354.108842][    C1]  ? __pfx_vms_gather_munmap_vmas+0x10/0x10
[  354.108860][    C1]  ? mas_find+0xa7d/0xd30
[  354.108873][    C1]  mmap_region+0x724/0x20c0
[  354.108895][    C1]  ? __pfx_mmap_region+0x10/0x10
[  354.108915][    C1]  ? rcu_is_watching+0x15/0xb0
[  354.108928][    C1]  ? process_measurement+0x15c3/0x1a40
[  354.108959][    C1]  ? mm_get_unmapped_area_vmflags+0xb3/0xe0
[  354.108979][    C1]  ? thp_get_unmapped_area_vmflags+0x161/0x310
[  354.108999][    C1]  ? cap_mmap_addr+0xb0/0x100
[  354.109017][    C1]  ? bpf_lsm_mmap_addr+0x9/0x20
[  354.109033][    C1]  ? security_mmap_addr+0x71/0x270
[  354.109050][    C1]  ? shmem_mapping+0xd/0x50
[  354.109064][    C1]  ? memfd_check_seals_mmap+0xc5/0x200
[  354.109080][    C1]  do_mmap+0xc45/0x10d0
[  354.109101][    C1]  ? __pfx_do_mmap+0x10/0x10
[  354.109116][    C1]  ? down_write_killable+0x178/0x230
[  354.109133][    C1]  ? __pfx_down_write_killable+0x10/0x10
[  354.109148][    C1]  ? common_file_perm+0x1b5/0x230
[  354.109164][    C1]  vm_mmap_pgoff+0x2a6/0x4d0
[  354.109182][    C1]  ? __pfx_vm_mmap_pgoff+0x10/0x10
[  354.109198][    C1]  ? __fget_files+0x2a/0x420
[  354.109212][    C1]  ? __fget_files+0x3a0/0x420
[  354.109223][    C1]  ? __fget_files+0x2a/0x420
[  354.109235][    C1]  ksys_mmap_pgoff+0x51f/0x760
[  354.109255][    C1]  do_syscall_64+0xfa/0x3b0
[  354.109269][    C1]  ? lockdep_hardirqs_on+0x9c/0x150
[  354.109281][    C1]  ? entry_SYSCALL_64_after_hwframe+0x77/0x7f
[  354.109295][    C1]  ? clear_bhb_loop+0x60/0xb0
[  354.109309][    C1]  entry_SYSCALL_64_after_hwframe+0x77/0x7f
[  354.109323][    C1] RIP: 0033:0x7f82ef23e242
[  354.109335][    C1] Code: 08 00 04 00 00 eb e2 90 41 f7 c1 ff 0f 00 00 75 27 55 89 cd 53 48 89 fb 48 85 ff 74 33 41 89 ea 48 89 df b8 09 00 00 00 0f 05 <48> 3d 00 f0 ff ff 77 5e 5b 5d c3 0f 1f 00 c7 05 46 40 01 00 16 00
[  354.109347][    C1] RSP: 002b:00007fff0d882db8 EFLAGS: 00000206 ORIG_RAX: 0000000000000009
[  354.109361][    C1] RAX: ffffffffffffffda RBX: 00007f82eef52000 RCX: 00007f82ef23e242
[  354.109371][    C1] RDX: 0000000000000001 RSI: 0000000000002000 RDI: 00007f82eef52000
SYZFAIL: failed to recv rpc
fd=3 want=4 recv=0 n=0 (errno 9: Bad file descriptor)
[  354.109380][    C1] RBP: 0000000000000812 R08: 0000000000000000 R09: 000000000000b000
[  354.109388][    C1] R10: 0000000000000812 R11: 0000000000000206 R12: 00007fff0d882e40
[  354.109397][    C1] R13: 00007f82ef213580 R14: 00007fff0d883230 R15: 00000fffe1b105ba
[  354.109412][    C1]  </TASK>
[  354.696410][    C1] IPVS: lc: UDP 224.0.0.2:0 - no destination available
[  354.862504][T17223] 8021q: adding VLAN 0 to HW filter on device batadv0
[  355.158438][ T5884] Bluetooth: hci2: command tx timeout
[  355.563149][ T3457] veth0_to_team: left allmulticast mode
[  355.568782][ T3457] veth0_to_team: left promiscuous mode
[  355.574331][ T3457] bridge0: port 1(veth0_to_team) entered disabled state
[  355.610835][ T3457] batman_adv: batadv0: Removing interface: ip6gretap1
[  355.682029][ T3457] bond5 (unregistering): (slave erspan0): Releasing active interface
[  355.706855][    C1] IPVS: lc: UDP 224.0.0.2:0 - no destination available
[  355.718842][ T3457] bond1 (unregistering): (slave gretap1): Releasing active interface
[  356.044425][ T3457] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface
[  356.053505][ T3457] bond_slave_0: left promiscuous mode
[  356.059695][ T3457] bond0 (unregistering): (slave batadv_slave_0): Releasing backup interface
[  356.069108][ T3457] batadv_slave_0: left promiscuous mode
[  356.074942][ T3457] bond0 (unregistering): Released all slaves
[  356.083687][ T3457] bond1 (unregistering): Released all slaves
[  356.092364][ T3457] bond2 (unregistering): Released all slaves
[  356.184301][ T3457] bond3 (unregistering): Released all slaves
[  356.193429][ T3457] bond4 (unregistering): Released all slaves
[  356.284860][ T3457] bond5 (unregistering): (slave veth7): Releasing active interface
[  356.293405][ T3457] bond5 (unregistering): Released all slaves
[  356.302034][ T3457] bond6 (unregistering): Released all slaves
[  356.310822][ T3457] bond7 (unregistering): Released all slaves
[  356.361923][ T3457] _ÐZ`Ô€@ÿÿ: left promiscuous mode
[  356.425320][ T3457] tipc: Disabling bearer <udp:syz2>
[  356.431917][ T3457] tipc: Disabling bearer <udp:s>
[  356.437118][ T3457] tipc: Left network mode
[  356.568566][ T3457] hsr_slave_0: left promiscuous mode
[  356.574302][ T3457] hsr_slave_1: left promiscuous mode
[  356.746779][    C1] IPVS: lc: UDP 224.0.0.2:0 - no destination available
[  357.130634][ T3457] IPVS: stop unused estimator thread 0...
[  357.139523][ T3457] ------------[ cut here ]------------
[  357.144987][ T3457] WARNING: CPU: 1 PID: 3457 at net/xfrm/xfrm_state.c:3303 xfrm_state_fini+0x26d/0x2f0
[  357.154790][ T3457] Modules linked in:
[  357.158980][ T3457] CPU: 1 UID: 0 PID: 3457 Comm: kworker/u8:6 Not tainted syzkaller #0 PREEMPT(full) 
[  357.168474][ T3457] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/12/2025
[  357.178539][ T3457] Workqueue: netns cleanup_net
[  357.183290][ T3457] RIP: 0010:xfrm_state_fini+0x26d/0x2f0
[  357.188868][ T3457] Code: c1 e8 03 42 80 3c 28 00 74 08 48 89 df e8 eb 77 00 f8 48 8b 3b 5b 41 5c 41 5d 41 5e 41 5f 5d e9 e9 35 e1 f7 e8 34 07 9d f7 90 <0f> 0b 90 e9 fd fd ff ff e8 26 07 9d f7 90 0f 0b 90 e9 60 fe ff ff
[  357.208624][ T3457] RSP: 0018:ffffc9000bf17898 EFLAGS: 00010293
[  357.214673][ T3457] RAX: ffffffff8a22a45c RBX: ffff888030ed2440 RCX: ffff888030221e00
[  357.222658][ T3457] RDX: 0000000000000000 RSI: ffffffff8be337e0 RDI: ffff888030221e00
[  357.230809][ T3457] RBP: ffffc9000bf179b0 R08: ffffffff8fa39337 R09: 1ffffffff1f47266
[  357.238796][ T3457] R10: dffffc0000000000 R11: fffffbfff1f47267 R12: ffffffff8f632040
[  357.246780][ T3457] R13: 1ffff920017e2f40 R14: ffff888030ed38c0 R15: dffffc0000000000
[  357.254746][ T3457] FS:  0000000000000000(0000) GS:ffff888125d14000(0000) knlGS:0000000000000000
[  357.263763][ T3457] CS:  0010 DS: 0000 ES: 0000 CR0: 0000000080050033
[  357.270525][ T3457] CR2: 00005556a525c4d8 CR3: 000000000df36000 CR4: 00000000003526f0
[  357.278534][ T3457] Call Trace:
[  357.281795][ T3457]  <TASK>
[  357.284718][ T3457]  xfrm_net_exit+0x2d/0x70
[  357.289149][ T3457]  ops_undo_list+0x497/0x990
[  357.293720][ T3457]  ? __pfx_ops_undo_list+0x10/0x10
[  357.298878][ T3457]  ? do_raw_spin_unlock+0x122/0x240
[  357.304077][ T3457]  cleanup_net+0x4c5/0x800
[  357.308513][ T3457]  ? __pfx_cleanup_net+0x10/0x10
[  357.313431][ T3457]  ? rcu_is_watching+0x15/0xb0
[  357.318216][ T3457]  ? process_scheduled_works+0x9ef/0x17b0
[  357.323919][ T3457]  ? process_scheduled_works+0x9ef/0x17b0
[  357.329638][ T3457]  process_scheduled_works+0xae1/0x17b0
[  357.335167][ T3457]  ? __pfx_process_scheduled_works+0x10/0x10
[  357.341241][ T3457]  worker_thread+0x8a0/0xda0
[  357.345886][ T3457]  kthread+0x70e/0x8a0
[  357.350570][ T3457]  ? __pfx_worker_thread+0x10/0x10
[  357.355659][ T3457]  ? __pfx_kthread+0x10/0x10
[  357.360268][ T3457]  ? _raw_spin_unlock_irq+0x23/0x50
[  357.365545][ T3457]  ? lockdep_hardirqs_on+0x9c/0x150
[  357.370842][ T3457]  ? __pfx_kthread+0x10/0x10
[  357.375432][ T3457]  ret_from_fork+0x3f9/0x770
[  357.380078][ T3457]  ? __pfx_ret_from_fork+0x10/0x10
[  357.385184][ T3457]  ? __switch_to_asm+0x39/0x70
[  357.390015][ T3457]  ? __switch_to_asm+0x33/0x70
[  357.394780][ T3457]  ? __pfx_kthread+0x10/0x10
[  357.399380][ T3457]  ret_from_fork_asm+0x1a/0x30
[  357.404130][ T3457]  </TASK>
[  357.407152][ T3457] Kernel panic - not syncing: kernel: panic_on_warn set ...
[  357.414412][ T3457] CPU: 1 UID: 0 PID: 3457 Comm: kworker/u8:6 Not tainted syzkaller #0 PREEMPT(full) 
[  357.423840][ T3457] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/12/2025
[  357.433879][ T3457] Workqueue: netns cleanup_net
[  357.438717][ T3457] Call Trace:
[  357.441976][ T3457]  <TASK>
[  357.444887][ T3457]  dump_stack_lvl+0x99/0x250
[  357.449460][ T3457]  ? __asan_memcpy+0x40/0x70
[  357.454030][ T3457]  ? __pfx_dump_stack_lvl+0x10/0x10
[  357.459208][ T3457]  ? __pfx__printk+0x10/0x10
[  357.463785][ T3457]  vpanic+0x281/0x750
[  357.467760][ T3457]  ? __pfx__printk+0x10/0x10
[  357.472387][ T3457]  ? __pfx_vpanic+0x10/0x10
[  357.476874][ T3457]  ? is_bpf_text_address+0x292/0x2b0
[  357.482159][ T3457]  panic+0xb9/0xc0
[  357.485860][ T3457]  ? __pfx_panic+0x10/0x10
[  357.490262][ T3457]  __warn+0x31b/0x4b0
[  357.494309][ T3457]  ? xfrm_state_fini+0x26d/0x2f0
[  357.499233][ T3457]  ? xfrm_state_fini+0x26d/0x2f0
[  357.504162][ T3457]  report_bug+0x2be/0x4f0
[  357.508472][ T3457]  ? xfrm_state_fini+0x26d/0x2f0
[  357.513398][ T3457]  ? xfrm_state_fini+0x26d/0x2f0
[  357.518325][ T3457]  ? xfrm_state_fini+0x26f/0x2f0
[  357.523279][ T3457]  handle_bug+0x84/0x160
[  357.527511][ T3457]  exc_invalid_op+0x1a/0x50
[  357.532004][ T3457]  asm_exc_invalid_op+0x1a/0x20
[  357.536838][ T3457] RIP: 0010:xfrm_state_fini+0x26d/0x2f0
[  357.542371][ T3457] Code: c1 e8 03 42 80 3c 28 00 74 08 48 89 df e8 eb 77 00 f8 48 8b 3b 5b 41 5c 41 5d 41 5e 41 5f 5d e9 e9 35 e1 f7 e8 34 07 9d f7 90 <0f> 0b 90 e9 fd fd ff ff e8 26 07 9d f7 90 0f 0b 90 e9 60 fe ff ff
[  357.561965][ T3457] RSP: 0018:ffffc9000bf17898 EFLAGS: 00010293
[  357.568023][ T3457] RAX: ffffffff8a22a45c RBX: ffff888030ed2440 RCX: ffff888030221e00
[  357.575981][ T3457] RDX: 0000000000000000 RSI: ffffffff8be337e0 RDI: ffff888030221e00
[  357.583942][ T3457] RBP: ffffc9000bf179b0 R08: ffffffff8fa39337 R09: 1ffffffff1f47266
[  357.591895][ T3457] R10: dffffc0000000000 R11: fffffbfff1f47267 R12: ffffffff8f632040
[  357.599851][ T3457] R13: 1ffff920017e2f40 R14: ffff888030ed38c0 R15: dffffc0000000000
[  357.607809][ T3457]  ? xfrm_state_fini+0x26c/0x2f0
[  357.612739][ T3457]  ? xfrm_state_fini+0x26c/0x2f0
[  357.617665][ T3457]  xfrm_net_exit+0x2d/0x70
[  357.622065][ T3457]  ops_undo_list+0x497/0x990
[  357.626640][ T3457]  ? __pfx_ops_undo_list+0x10/0x10
[  357.631734][ T3457]  ? do_raw_spin_unlock+0x122/0x240
[  357.636917][ T3457]  cleanup_net+0x4c5/0x800
[  357.641319][ T3457]  ? __pfx_cleanup_net+0x10/0x10
[  357.646239][ T3457]  ? rcu_is_watching+0x15/0xb0
[  357.650997][ T3457]  ? process_scheduled_works+0x9ef/0x17b0
[  357.656703][ T3457]  ? process_scheduled_works+0x9ef/0x17b0
[  357.662408][ T3457]  process_scheduled_works+0xae1/0x17b0
[  357.667945][ T3457]  ? __pfx_process_scheduled_works+0x10/0x10
[  357.674003][ T3457]  worker_thread+0x8a0/0xda0
[  357.678583][ T3457]  kthread+0x70e/0x8a0
[  357.682638][ T3457]  ? __pfx_worker_thread+0x10/0x10
[  357.687729][ T3457]  ? __pfx_kthread+0x10/0x10
[  357.692304][ T3457]  ? _raw_spin_unlock_irq+0x23/0x50
[  357.697488][ T3457]  ? lockdep_hardirqs_on+0x9c/0x150
[  357.702668][ T3457]  ? __pfx_kthread+0x10/0x10
[  357.707243][ T3457]  ret_from_fork+0x3f9/0x770
[  357.711820][ T3457]  ? __pfx_ret_from_fork+0x10/0x10
[  357.716915][ T3457]  ? __switch_to_asm+0x39/0x70
[  357.721664][ T3457]  ? __switch_to_asm+0x33/0x70
[  357.726411][ T3457]  ? __pfx_kthread+0x10/0x10
[  357.730989][ T3457]  ret_from_fork_asm+0x1a/0x30
[  357.735744][ T3457]  </TASK>
[  357.738891][ T3457] Kernel Offset: disabled
[  357.743196][ T3457] Rebooting in 86400 seconds..