last executing test programs:

5m32.950682027s ago: executing program 2 (id=4667):
r0 = socket$inet6(0xa, 0x80002, 0x5)
setsockopt$IP6T_SO_SET_REPLACE(r0, 0x29, 0x40, &(0x7f0000000500)=@security={'security\x00', 0xe, 0x4, 0x478, 0xffffffff, 0x0, 0x3f0, 0x0, 0xffffffff, 0xffffffff, 0x4e0, 0x4e0, 0x4e0, 0xffffffff, 0x4, 0x0, {[{{@ipv6={@empty, @ipv4={'\x00', '\xff\xff', @remote}, [0x0, 0xff000000, 0xff], [0xff, 0x0, 0xffffffff, 0xffffffff], 'wg1\x00', 'veth0_to_bond\x00', {0xff}, {}, 0x3a, 0x9, 0x1, 0x10}, 0x0, 0xa8, 0x1d0}, @common=@unspec=@SECMARK={0x128, 'SECMARK\x00', 0x0, {0x1, 0xe, 'system_u:object_r:unconfined_execmem_exec_t:s0\x00'}}}, {{@uncond, 0x0, 0xa8, 0xe8}, @common=@unspec=@ERROR={0x40, 'ERROR\x00', 0x0, "4d3a46e177abbed5001ef11bd2f0c66301c685c93d118e7c89799c396822"}}, {{@ipv6={@private2={0xfc, 0x2, '\x00', 0x1}, @loopback, [0xff000000, 0xffffff00, 0x0, 0xffffffff], [0xffffffff, 0xff000000, 0xff, 0xff000000], 'ipvlan0\x00', 'wg1\x00', {}, {}, 0x3a, 0x7, 0x4, 0x8}, 0x0, 0xa8, 0xf0}, @common=@inet=@TEE={0x48, 'TEE\x00', 0x1, {@ipv6=@private2, 'veth1\x00', {0x2}}}}], {{'\x00', 0x0, 0xa8, 0xd0}, {0x28}}}}, 0x4d8)

5m32.720000195s ago: executing program 2 (id=4671):
socket$inet(0x2, 0x3, 0x5) (async)
r0 = socket$inet(0x2, 0x3, 0x5)
setsockopt$inet_int(r0, 0x0, 0x19, &(0x7f0000000080)=0x3, 0x2)
r1 = socket(0x40000000015, 0x5, 0x0)
bind$inet(r1, &(0x7f0000000340)={0x2, 0x0, @loopback}, 0x10)
sendmsg(r1, &(0x7f0000000200)={&(0x7f0000000040)=@in={0x2, 0x0, @rand_addr=0x64010100}, 0x80, 0x0, 0x0, &(0x7f0000019580)=ANY=[@ANYBLOB="1000000000000000040000000000000010000000000000001401000007"], 0x20}, 0x0)
bpf$BPF_GET_PROG_INFO(0xf, &(0x7f0000000540)={0xffffffffffffffff, 0xe0, &(0x7f0000000440)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, &(0x7f00000000c0)=[0x0, 0x0, 0x0], ""/16, <r2=>0x0, 0x0, 0x0, 0x0, 0x6, 0x8, &(0x7f0000000100)=[0x0, 0x0, 0x0, 0x0, 0x0, 0x0], &(0x7f0000000140)=[0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0], 0x0, 0xee, &(0x7f0000000180)=[{}, {}, {}, {}, {}, {}, {}, {}, {}, {}], 0x50, 0x10, &(0x7f0000000200), &(0x7f00000003c0), 0x8, 0x1c, 0x8, 0x8, &(0x7f0000000400)}}, 0x10)
ioctl$sock_ipv4_tunnel_SIOCCHGTUNNEL(r0, 0x89f3, &(0x7f0000000600)={'tunl0\x00', &(0x7f0000000580)={'erspan0\x00', r2, 0x10, 0x700, 0xfffffffa, 0x6, {{0xe, 0x4, 0x0, 0x6, 0x38, 0x68, 0x0, 0xf, 0x2f, 0x0, @loopback, @multicast1, {[@timestamp={0x44, 0x24, 0xd, 0x0, 0xa, [0xb5, 0x5, 0x3, 0x2, 0x8000, 0x5, 0x7, 0xfff]}]}}}}})
bpf$PROG_LOAD(0x5, &(0x7f0000000240)={0x1, 0x4, &(0x7f0000000640)=ANY=[@ANYBLOB="b70500000000000061104a00000000000400000000000000950000000000000038521adfdf5bda4a1cfb34ebe2c93250f73ca6a593ebfe84c49f1f10ef876ead533b5b9fca7362c546181b5edab879f36cd24a6950fa7b82f6a5cae272b85016e205718ab8092e14077fdd288e699d6ff56c07e6d29dc4495b3bf975a3d92f09a459430971f89bdd23122c4c6c5239411dd38f6d1f9a3d0870216c8c50d4687124bc353134520f4f75064ec146415ea9c6fd075ce19c23fc3947bd9f7c95904134c6594247"], &(0x7f00000002c0)='GPL\x00', 0x5, 0xfd90, &(0x7f0000000300)=""/188, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x8, &(0x7f0000000000), 0x1f3, 0x10, &(0x7f0000000080), 0xfffffffffffffc79}, 0x2a) (async)
bpf$PROG_LOAD(0x5, &(0x7f0000000240)={0x1, 0x4, &(0x7f0000000640)=ANY=[@ANYBLOB="b70500000000000061104a00000000000400000000000000950000000000000038521adfdf5bda4a1cfb34ebe2c93250f73ca6a593ebfe84c49f1f10ef876ead533b5b9fca7362c546181b5edab879f36cd24a6950fa7b82f6a5cae272b85016e205718ab8092e14077fdd288e699d6ff56c07e6d29dc4495b3bf975a3d92f09a459430971f89bdd23122c4c6c5239411dd38f6d1f9a3d0870216c8c50d4687124bc353134520f4f75064ec146415ea9c6fd075ce19c23fc3947bd9f7c95904134c6594247"], &(0x7f00000002c0)='GPL\x00', 0x5, 0xfd90, &(0x7f0000000300)=""/188, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x8, &(0x7f0000000000), 0x1f3, 0x10, &(0x7f0000000080), 0xfffffffffffffc79}, 0x2a)

5m32.580988953s ago: executing program 2 (id=4673):
r0 = socket$nl_generic(0x10, 0x3, 0x10)
r1 = socket$inet6_udplite(0xa, 0x2, 0x88)
connect$inet6(r1, &(0x7f0000000040)={0xa, 0x5e1e, 0x0, @mcast2, 0x1}, 0x1c)
getsockopt$sock_buf(r1, 0x1, 0x19, &(0x7f0000002f80)=""/217, &(0x7f0000003080)=0xd9)
r2 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000200), 0xffffffffffffffff)
sendmsg$NL80211_CMD_GET_WIPHY(r0, &(0x7f00000005c0)={0x0, 0x0, &(0x7f0000000300)={&(0x7f0000000500)={0x24, r2, 0xf81, 0x0, 0x0, {{}, {@val={0x8, 0x1, 0x1000000}, @val={0x8}, @void}}}, 0x24}}, 0x0)

5m32.475473764s ago: executing program 2 (id=4676):
r0 = syz_init_net_socket$rose(0xb, 0x5, 0x0)
setsockopt$rose(r0, 0x104, 0x3, &(0x7f0000000000)=0x7, 0x4)
r1 = socket$packet(0x11, 0x2, 0x300)
setsockopt$packet_fanout(r1, 0x107, 0x12, &(0x7f0000000040)={0x0, 0x6}, 0x4)
setsockopt$packet_fanout_data(r1, 0x107, 0x16, &(0x7f0000000100)={0x2, &(0x7f0000000180)=[{0x6c}, {0x6}]}, 0x10) (async)
setsockopt$packet_fanout_data(r1, 0x107, 0x16, &(0x7f0000000100)={0x2, &(0x7f0000000180)=[{0x6c}, {0x6}]}, 0x10)
ioctl$IOCTL_GET_NCIDEV_IDX(0xffffffffffffffff, 0x0, &(0x7f0000000080)) (async)
ioctl$IOCTL_GET_NCIDEV_IDX(0xffffffffffffffff, 0x0, &(0x7f0000000080)=<r2=>0x0)
sendto(r1, &(0x7f0000000000)="8fc9f6ddba0ef8f61e8d854435580a7cdecddfebd9026ce566273eb1f2992b72326f478e", 0x24, 0x40011, &(0x7f00000001c0)=@nfc_llcp={0x27, r2, 0x0, 0x4, 0x2, 0x2, "44dd9e6bd345d712f1cef2d6e94c0a2b0e8b5689f42eaf008b926b4f527fb23b66896a1693b9c2d9685e319c8f1a311390171a81b0472ac7729037ed99256c", 0x32}, 0x80)
getsockopt$inet_opts(0xffffffffffffffff, 0x0, 0x9, &(0x7f0000000240)=""/130, &(0x7f00000000c0)=0x82)

5m32.455795669s ago: executing program 2 (id=4677):
r0 = socket$kcm(0x10, 0x0, 0x0)
sendmsg$inet(r0, &(0x7f0000000140)={0x0, 0x2, &(0x7f0000000100)=[{&(0x7f0000000180)="5c00000013006bcd9e3fe3dc4e48aa31086b8703410000004000000000000000040014000d000a00100000009ee517d34460bc08eab556a705251e6182949a3651f60a84c9f5d1938837e786a6d0bdd7fcf50e4509c5bb5a00f69853", 0x5c}], 0x1, 0x0, 0x0, 0x1f000801}, 0x0)
socket$kcm(0x10, 0x0, 0x0) (async)
sendmsg$inet(r0, &(0x7f0000000140)={0x0, 0x2, &(0x7f0000000100)=[{&(0x7f0000000180)="5c00000013006bcd9e3fe3dc4e48aa31086b8703410000004000000000000000040014000d000a00100000009ee517d34460bc08eab556a705251e6182949a3651f60a84c9f5d1938837e786a6d0bdd7fcf50e4509c5bb5a00f69853", 0x5c}], 0x1, 0x0, 0x0, 0x1f000801}, 0x0) (async)

5m32.369448056s ago: executing program 2 (id=4679):
r0 = socket$nl_xfrm(0x10, 0x3, 0x6)
sendmsg$nl_xfrm(r0, &(0x7f00000006c0)={0x0, 0x0, &(0x7f0000000680)={&(0x7f0000000300)=@updsa={0xf0, 0x1a, 0x1, 0x0, 0x0, {{@in6=@ipv4={'\x00', '\xff\xff', @remote}, @in=@initdev={0xac, 0x1e, 0x20, 0x0}, 0x0, 0x0, 0x0, 0x0, 0xa, 0x0, 0xb0}, {@in6=@empty}, @in6=@private2, {}, {}, {}, 0x0, 0x0, 0x2}}, 0xf0}}, 0x0)
r1 = socket$nl_netfilter(0x10, 0x3, 0xc)
bind$packet(r1, &(0x7f0000000080)={0x10, 0x0, 0x0, 0x1, 0x0, 0x6, @random="b6c1c02b5fbb"}, 0x14)
getsockname(r1, 0x0, &(0x7f0000000040))
ioctl$int_in(r0, 0x5421, &(0x7f0000000000)=0x1)
r2 = socket$nl_generic(0x10, 0x3, 0x10)
sendmsg$nl_generic(r2, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000001ac0)={&(0x7f00000001c0)={0x14, 0x26, 0x1, 0x70bd25, 0x25dfdbfc, {0x6}}, 0x14}}, 0x20006004)

5m17.363342554s ago: executing program 32 (id=4679):
r0 = socket$nl_xfrm(0x10, 0x3, 0x6)
sendmsg$nl_xfrm(r0, &(0x7f00000006c0)={0x0, 0x0, &(0x7f0000000680)={&(0x7f0000000300)=@updsa={0xf0, 0x1a, 0x1, 0x0, 0x0, {{@in6=@ipv4={'\x00', '\xff\xff', @remote}, @in=@initdev={0xac, 0x1e, 0x20, 0x0}, 0x0, 0x0, 0x0, 0x0, 0xa, 0x0, 0xb0}, {@in6=@empty}, @in6=@private2, {}, {}, {}, 0x0, 0x0, 0x2}}, 0xf0}}, 0x0)
r1 = socket$nl_netfilter(0x10, 0x3, 0xc)
bind$packet(r1, &(0x7f0000000080)={0x10, 0x0, 0x0, 0x1, 0x0, 0x6, @random="b6c1c02b5fbb"}, 0x14)
getsockname(r1, 0x0, &(0x7f0000000040))
ioctl$int_in(r0, 0x5421, &(0x7f0000000000)=0x1)
r2 = socket$nl_generic(0x10, 0x3, 0x10)
sendmsg$nl_generic(r2, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000001ac0)={&(0x7f00000001c0)={0x14, 0x26, 0x1, 0x70bd25, 0x25dfdbfc, {0x6}}, 0x14}}, 0x20006004)

2m34.792965563s ago: executing program 4 (id=6921):
socket$kcm(0x2, 0x922000000001, 0x106)
setsockopt$inet_int(0xffffffffffffffff, 0x0, 0xf, &(0x7f0000000340)=0xfffffffffffffff9, 0x4)
setsockopt$inet_sctp6_SCTP_SOCKOPT_BINDX_ADD(0xffffffffffffffff, 0x84, 0x64, &(0x7f0000000380)=[@in6={0xa, 0x0, 0x0, @ipv4={'\x00', '\xff\xff', @broadcast}}, @in={0x2, 0x0, @multicast2}], 0x2c)

2m34.735384487s ago: executing program 4 (id=6923):
r0 = socket$inet6_tcp(0xa, 0x1, 0x0)
setsockopt$inet6_tcp_int(r0, 0x6, 0x6, &(0x7f0000000000)=0x80000001, 0x4)
r1 = socket$inet_icmp_raw(0x2, 0x3, 0x1)
sendto$inet(r1, &(0x7f0000000280)="0304170c19bb7a29", 0x8, 0x24000004, &(0x7f0000000340)={0x2, 0x4e23, @dev={0xac, 0x14, 0x14, 0x26}}, 0x10)
socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000040)={0xffffffffffffffff, <r2=>0xffffffffffffffff})
r3 = bpf$MAP_CREATE(0x0, &(0x7f0000000200)=@base={0xf, 0x4, 0x4, 0x12}, 0x48)
r4 = bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000340)={0xe, 0x4, &(0x7f0000000400)=ANY=[@ANYBLOB="18020000801000000000000004000000850000002f00000095"], &(0x7f0000000000)='syzkaller\x00', 0x0, 0x0, 0x0, 0x40f00, 0x44, '\x00', 0x0, 0x25, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x1fffff}, 0x94)
bpf$BPF_PROG_DETACH(0x8, &(0x7f0000000080)={@map=r3, r4, 0x5}, 0x10)
bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, &(0x7f0000000740)={{r3}, &(0x7f00000006c0), &(0x7f0000000700)=r2}, 0x20)
r5 = socket$can_raw(0x1d, 0x3, 0x1)
setsockopt$CAN_RAW_ERR_FILTER(r5, 0x65, 0x7, &(0x7f00000001c0)=0x8, 0x4)
ioctl$sock_SIOCGIFINDEX(r5, 0x8933, &(0x7f0000000340)={'lo\x00', <r6=>0x0})
sendmsg$can_raw(r5, &(0x7f0000000140)={&(0x7f0000000000)={0x1d, r6}, 0x4, &(0x7f00000005c0)={&(0x7f0000000100)=@can={{}, 0x80, 0x3, 0x4, 0x2, "07000000008000"}, 0x10}, 0x1, 0x0, 0x0, 0xf4623959d48cfd6e}, 0x0)
r7 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000001c0)='memory.events\x00', 0x275a, 0x0)
write$cgroup_subtree(r7, &(0x7f0000000000)=ANY=[], 0x32600)
mmap(&(0x7f0000000000/0x3000)=nil, 0x3000, 0x2000001, 0x12, r7, 0x0)
bpf$MAP_CREATE(0x0, &(0x7f0000000000)=@bloom_filter={0x1e, 0x1, 0x10, 0x4, 0x41534, r3, 0xffff, '\x00', r6, r7, 0x4, 0x0, 0x0, 0x6}, 0x50)

2m34.45798845s ago: executing program 4 (id=6928):
r0 = socket$packet(0x11, 0x3, 0x300)
setsockopt$packet_int(r0, 0x107, 0xf, &(0x7f0000000100)=0x207, 0x4)
ioctl$sock_SIOCGIFINDEX(r0, 0x8933, &(0x7f0000000200)={'bridge0\x00', <r1=>0x0})
sendto$packet(r0, &(0x7f00000002c0)="05031600d3fc140000004788031c09102c28", 0xfce0, 0x4, &(0x7f0000000140)={0x11, 0x0, r1, 0x1, 0x0, 0x6, @multicast}, 0x14)
bpf$PROG_LOAD(0x5, &(0x7f000000e000)={0x10, 0x4, &(0x7f0000000040)=ANY=[@ANYBLOB="b400000000000000791048000000000071041b000000000095000000"], &(0x7f0000003ff6)='GPL\x00', 0x2, 0xfd90, &(0x7f000000cf3d)=""/195, 0x0, 0x0, '\x00', 0x0, @sk_msg}, 0x48)

2m34.406900261s ago: executing program 4 (id=6930):
r0 = socket$nl_netfilter(0x10, 0x3, 0xc)
sendmsg$NFT_BATCH(r0, &(0x7f000000c2c0)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000340)=ANY=[@ANYBLOB="140000001000010000000000000000000000000a28000000000a0101000000005e1affd5020000000900010073797a300000000008000240000000032c000000030a01030000e6ff00000000020000000900010073797a30000000000900030073797a320000000014000000110001"], 0x7c}}, 0x0)
sendmsg$NFT_BATCH(r0, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000140)={{0x14}, [@NFT_MSG_NEWRULE={0x54, 0x6, 0xa, 0x40b, 0x0, 0x0, {0x2}, [@NFTA_RULE_EXPRESSIONS={0x28, 0x4, 0x0, 0x1, [{0x24, 0x1, 0x0, 0x1, @meta={{0x9}, @val={0x14, 0x2, 0x0, 0x1, [@NFTA_META_DREG={0x8}, @NFTA_META_SREG={0x8, 0x3, 0x1, 0x0, 0x9}]}}}]}, @NFTA_RULE_TABLE={0x9, 0x1, 'syz0\x00'}, @NFTA_RULE_CHAIN={0x9, 0x2, 'syz2\x00'}]}], {0x14}}, 0x7c}}, 0x0)

2m34.299240443s ago: executing program 4 (id=6932):
r0 = socket$kcm(0xa, 0x2, 0x88)
sendmsg$inet(r0, &(0x7f0000000000)={&(0x7f0000000080)={0x2, 0x8000, @multicast1}, 0x10, 0x0, 0x0, &(0x7f0000000040)=[@ip_pktinfo={{0x1c, 0x0, 0x34, {0x0, @local, @local}}}], 0x20}, 0x0)
r1 = socket$pppl2tp(0x18, 0x1, 0x1)
r2 = socket(0x2, 0x80805, 0x0)
sendto$inet(0xffffffffffffffff, 0x0, 0x0, 0x200007fd, &(0x7f0000000000)={0x2, 0x24e23, @loopback}, 0x10)
getsockopt$bt_hci(r2, 0x84, 0x75, &(0x7f0000000000)=""/4102, &(0x7f00000010c0)=0x1006)
r3 = socket$inet6_udp(0xa, 0x2, 0x0)
connect$pppl2tp(r1, &(0x7f0000000000)=@pppol2tpv3={0x18, 0x1, {0x3, r3, {0x2, 0x0, @dev}, 0x2}}, 0x2e)
ioctl$PPPIOCGL2TPSTATS(r1, 0x80487436, &(0x7f0000000a40)="480e23")
bpf$PROG_LOAD(0x5, &(0x7f00000004c0)={0x1, 0x4, &(0x7f0000000580)=@framed={{0x18, 0x5, 0x0, 0x0, 0x40000}, [@call={0x85, 0x0, 0x0, 0x7a}]}, &(0x7f0000000000)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94)

2m34.137373948s ago: executing program 4 (id=6935):
r0 = socket$nl_generic(0x10, 0x3, 0x10)
r1 = socket$inet_mptcp(0x2, 0x1, 0x106)
r2 = socket$nl_generic(0x10, 0x3, 0x10)
sendmsg$nl_generic(r2, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000080)={0x18, 0x26, 0x1, 0x7fffd, 0x1000, {0x4}, [@nested={0x4, 0x1}]}, 0x18}, 0x1, 0x0, 0x0, 0x400c801}, 0x4008090)
setsockopt$sock_timeval(r1, 0x1, 0x2, &(0x7f0000000040), 0x10)
sendmsg$nl_generic(r0, &(0x7f00000029c0)={0x0, 0x0, &(0x7f0000000100)={&(0x7f0000000440)=ANY=[@ANYBLOB="1c00000010000107000040000000001a0a0000000600010011"], 0x1c}, 0x1, 0x0, 0x0, 0x8010}, 0x0)

2m18.46919057s ago: executing program 33 (id=6935):
r0 = socket$nl_generic(0x10, 0x3, 0x10)
r1 = socket$inet_mptcp(0x2, 0x1, 0x106)
r2 = socket$nl_generic(0x10, 0x3, 0x10)
sendmsg$nl_generic(r2, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000080)={0x18, 0x26, 0x1, 0x7fffd, 0x1000, {0x4}, [@nested={0x4, 0x1}]}, 0x18}, 0x1, 0x0, 0x0, 0x400c801}, 0x4008090)
setsockopt$sock_timeval(r1, 0x1, 0x2, &(0x7f0000000040), 0x10)
sendmsg$nl_generic(r0, &(0x7f00000029c0)={0x0, 0x0, &(0x7f0000000100)={&(0x7f0000000440)=ANY=[@ANYBLOB="1c00000010000107000040000000001a0a0000000600010011"], 0x1c}, 0x1, 0x0, 0x0, 0x8010}, 0x0)

13.700871305s ago: executing program 5 (id=7893):
r0 = socket(0x10, 0x803, 0x0)
sendmsg$SMC_PNETID_GET(r0, &(0x7f0000000300)={0x0, 0x0, &(0x7f00000001c0)={0x0, 0x14}}, 0x0)
r1 = socket$nl_netfilter(0x10, 0x3, 0xc)
sendmsg$NFT_BATCH(r1, &(0x7f0000000200)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000600)=ANY=[@ANYBLOB="140000001000010000000000000000000000000a20000000000a01020000000000000000010000000900010073797a300000000058000000160a01000000000000000000010000000900010073797a30000000000900020073797a31000000002c0003800800014000000000180003801400010076657468315f746f5f626f6e6400000008000240000000006c000000160a0101000b000000000000010000000900020073797a30000000000900010073797a30000000004000038008000140000000002c0003801400010067656e657665300000000000000000001400010076657468315f746f5f626f6e6400000008000240"], 0x10c}}, 0x0)
sendmsg$nl_route(0xffffffffffffffff, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000100)=ANY=[@ANYBLOB="3c00000010001fff001201000006000043be4354", @ANYRES32=0x0, @ANYBLOB="ff7f000000000000140012800a00010076786c616e"], 0x3c}, 0x1, 0x8000a0ffffffff}, 0x0)
r2 = socket(0x10, 0x80002, 0x0)
sendmmsg$alg(r2, &(0x7f00000000c0), 0x492492492492627, 0x0)
getsockname$packet(r0, &(0x7f0000000200)={0x11, 0x0, <r3=>0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000580)=0x14)
write(r2, &(0x7f0000000280)="7e6f227eaa1a26ac5afdc1072b2c45c35be2067f5fce98846d2a11d2e1306d26b4726dbb689fe4bed14ab0", 0x2b)
r4 = socket$igmp6(0xa, 0x3, 0x2)
setsockopt$IP6T_SO_SET_REPLACE(r4, 0x29, 0x40, &(0x7f00000003c0)=@raw={'raw\x00', 0x8, 0x3, 0x328, 0x190, 0xffffffff, 0xffffffff, 0x190, 0xffffffff, 0x258, 0xffffffff, 0xffffffff, 0x258, 0xffffffff, 0x3, 0x0, {[{{@ipv6={@loopback, @private0, [0xff, 0x0, 0xff000000], [0x0, 0x0, 0x0, 0xff000000], 'wlan0\x00', 'veth0_to_team\x00', {0xff}, {}, 0x2c, 0xc7, 0x6, 0x61}, 0x0, 0x168, 0x190, 0x0, {}, [@common=@ah={{0x30}, {[0x4d6, 0x4d6], 0x8, 0xe, 0x2}}, @common=@srh1={{0x90}, {0x3a, 0x2, 0xf, 0x0, 0x9, @private1, @ipv4={'\x00', '\xff\xff', @remote}, @dev={0xfe, 0x80, '\x00', 0xd}, [0xffffffff, 0xffffff00, 0xffffffff, 0xff000000], [0xff000000, 0xff, 0xffffff00, 0xff], [0xffffffff, 0xffffffff, 0x0, 0xffffff00], 0x13a8, 0x1e8}}]}, @common=@unspec=@NFQUEUE2={0x28, 'NFQUEUE\x00', 0x2, {0x2, 0x4, 0x6}}}, {{@ipv6={@remote, @ipv4={'\x00', '\xff\xff', @dev={0xac, 0x14, 0x14, 0x36}}, [], [], 'erspan0\x00', 'gre0\x00'}, 0x0, 0xa8, 0xc8}, @unspec=@NOTRACK={0x20}}], {{'\x00', 0x0, 0xa8, 0xd0}, {0x28, '\x00', 0x7}}}}, 0x388)
r5 = socket$nl_route(0x10, 0x3, 0x0)
r6 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000001c0)='cgroup.controllers\x00', 0x275a, 0x0)
mmap(&(0x7f0000000000/0x400000)=nil, 0x400000, 0x0, 0x10012, r6, 0x0)
r7 = socket$nl_route(0x10, 0x3, 0x0)
sendmsg$nl_route(r7, &(0x7f0000000380)={0x0, 0x0, &(0x7f0000000240)={&(0x7f0000000000)=@ipv6_newnexthop={0x30, 0x68, 0x1, 0x0, 0x0, {}, [@NHA_FDB={0x4}, @NHA_ENCAP={0xc, 0x8, 0x0, 0x1, @ILA_ATTR_IDENT_TYPE={0x5}}, @NHA_ID={0x8}]}, 0x30}}, 0x0)
r8 = socket$nl_netfilter(0x10, 0x3, 0xc)
sendmsg$NFT_BATCH(r8, &(0x7f0000000380)={0x0, 0x13, &(0x7f0000000080)={&(0x7f00000000c0)=ANY=[@ANYBLOB="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"], 0x150}}, 0x0)
sendmsg$nl_route(r5, &(0x7f0000000380)={0x0, 0x0, &(0x7f00000002c0)={&(0x7f0000000040)=ANY=[@ANYRES32, @ANYRES8=r3, @ANYRES8=r0], 0x54}, 0x1, 0x0, 0x0, 0x44801}, 0x0)
r9 = socket$inet(0x2, 0x2, 0x0)
r10 = socket$inet6_udplite(0xa, 0x2, 0x88)
connect$inet6(r10, &(0x7f0000000000)={0xa, 0x0, 0x0, @dev, 0x20004}, 0x1c)
getsockopt$sock_buf(r10, 0x1, 0x19, &(0x7f0000002f80)=""/217, &(0x7f0000003080)=0xd9)
r11 = socket$nl_route(0x10, 0x3, 0x0)
r12 = bpf$MAP_CREATE(0x0, &(0x7f00000007c0)=@base={0x7, 0x4, 0x8, 0x1}, 0x48)
setsockopt$SO_ATTACH_FILTER(0xffffffffffffffff, 0x1, 0x1a, &(0x7f0000000080)={0x1, &(0x7f0000000040)=[{}]}, 0x10)
bpf$MAP_UPDATE_ELEM(0x4, &(0x7f0000000180)={r12, &(0x7f0000000080), 0x0}, 0x20)
getsockopt$sock_cred(r9, 0x1, 0x11, &(0x7f0000000080)={<r13=>0x0}, &(0x7f0000000180)=0xc)
sendmsg$nl_route(r11, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000640)=@newlink={0x30, 0x10, 0x801, 0xfffffffd, 0x25dfdbfc, {0x0, 0x0, 0x0, r3, 0x1010}, [@IFLA_GROUP={0x8, 0x1b, 0x8000}, @IFLA_NET_NS_PID={0x8, 0x13, r13}]}, 0x30}}, 0x0)
sendmmsg$inet(r9, &(0x7f0000003380)=[{{&(0x7f0000000000)={0x2, 0x4e21, @local}, 0x10, 0x0, 0x0, &(0x7f0000001a40)=[@ip_pktinfo={{0x1c, 0x0, 0x8, {r3, @empty, @rand_addr=0x64010102}}}], 0x20}}], 0x1, 0x4040880)

13.557904104s ago: executing program 5 (id=7896):
syz_emit_ethernet(0x5e, &(0x7f00000001c0)={@local, @local, @void, {@ipv6={0x86dd, @tcp={0x0, 0x6, "ff00f5", 0x28, 0x6, 0x0, @local, @local, {[], {{0x0, 0x4e22, 0x41424344, 0x41424344, 0x0, 0x0, 0xa, 0x0, 0x0, 0x0, 0x0, {[@sack={0x1d, 0x2, [0x0, 0x0, 0x0, 0x0]}]}}}}}}}}, 0x0)
openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000080)='cpuacct.usage_percpu_sys\x00', 0x275a, 0x0)
bpf$PROG_LOAD(0x5, &(0x7f00000017c0)={0x1, 0xe, &(0x7f0000001880)=ANY=[@ANYBLOB="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"], &(0x7f00000001c0)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x8, &(0x7f0000000000), 0x8, 0x10, &(0x7f0000000000)={0x0, 0x0, 0x3}, 0x10}, 0x94)
r0 = socket$nl_generic(0x10, 0x3, 0x10)
sendmsg$nl_generic(r0, &(0x7f0000000100)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000040)={0x14, 0x25, 0x1, 0xfffffffd, 0x0, {0x2, 0x2}}, 0x14}}, 0x20000090)
r1 = socket$packet(0x11, 0x2, 0x300)
setsockopt$packet_fanout(r1, 0x107, 0x12, &(0x7f0000000100)={0x0, 0x7}, 0x4)
setsockopt$packet_int(r1, 0x107, 0x16, &(0x7f0000000000)=0x4, 0x4)
syz_genetlink_get_family_id$tipc2(&(0x7f0000000400), 0xffffffffffffffff)
syz_emit_ethernet(0x5e, &(0x7f00000001c0)={@local, @local, @void, {@ipv6={0x86dd, @tcp={0x0, 0x6, "ff00f5", 0x28, 0x6, 0x0, @local, @local, {[], {{0x0, 0x4e22, 0x41424344, 0x41424344, 0x0, 0x0, 0xa, 0x0, 0x0, 0x0, 0x0, {[@sack={0x1d, 0x2, [0x0, 0x0, 0x0, 0x0]}]}}}}}}}}, 0x0) (async)
openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000080)='cpuacct.usage_percpu_sys\x00', 0x275a, 0x0) (async)
bpf$PROG_LOAD(0x5, &(0x7f00000017c0)={0x1, 0xe, &(0x7f0000001880)=ANY=[@ANYBLOB="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"], &(0x7f00000001c0)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x8, &(0x7f0000000000), 0x8, 0x10, &(0x7f0000000000)={0x0, 0x0, 0x3}, 0x10}, 0x94) (async)
socket$nl_generic(0x10, 0x3, 0x10) (async)
sendmsg$nl_generic(r0, &(0x7f0000000100)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000040)={0x14, 0x25, 0x1, 0xfffffffd, 0x0, {0x2, 0x2}}, 0x14}}, 0x20000090) (async)
socket$packet(0x11, 0x2, 0x300) (async)
setsockopt$packet_fanout(r1, 0x107, 0x12, &(0x7f0000000100)={0x0, 0x7}, 0x4) (async)
setsockopt$packet_int(r1, 0x107, 0x16, &(0x7f0000000000)=0x4, 0x4) (async)
syz_genetlink_get_family_id$tipc2(&(0x7f0000000400), 0xffffffffffffffff) (async)

13.282169838s ago: executing program 5 (id=7900):
r0 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10)
r1 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10)
r2 = syz_genetlink_get_family_id$ieee802154(&(0x7f00000000c0), r1)
sendmsg$IEEE802154_START_REQ(r0, &(0x7f0000000200)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f0000000140)={0x1c, r2, 0x5fa3dbc996777dbd, 0x0, 0x0, {}, [@IEEE802154_ATTR_COORD_PAN_ID={0x6}]}, 0x1c}}, 0x0)
r3 = socket$inet6_sctp(0xa, 0x1, 0x84)
r4 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000200)='memory.events\x00', 0x275a, 0x0)
bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000200)={0xd, 0x4, &(0x7f0000000040)=ANY=[@ANYBLOB="180000000000000000000000000000009112c2000000000095"], &(0x7f0000000100)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0xd, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0xffffffff}, 0x94)
mmap(&(0x7f0000002000/0x3000)=nil, 0x3000, 0x0, 0x12, r4, 0x0)
r5 = socket(0x11, 0xa, 0x0)
r6 = openat$nci(0xffffffffffffff9c, &(0x7f0000000400), 0x2, 0x0)
r7 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10)
r8 = syz_genetlink_get_family_id$nfc(&(0x7f0000000100), r7)
ioctl$IOCTL_GET_NCIDEV_IDX(r6, 0x0, &(0x7f00000000c0)=<r9=>0x0)
socket$nl_route(0x10, 0x3, 0x0)
getsockopt$inet_pktinfo(0xffffffffffffffff, 0x0, 0x8, 0x0, &(0x7f0000000200))
sendmsg$NFC_CMD_DEV_UP(r7, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000000)=ANY=[@ANYBLOB="1c000000", @ANYRES16=r8, @ANYBLOB="010026bd70003c0200000200000008000100", @ANYRES32=r9, @ANYRESHEX=r7, @ANYRESDEC=r8, @ANYRES8=r9], 0x1c}}, 0x0)
write$nci(r6, &(0x7f0000000280)=ANY=[@ANYBLOB="610904150102481f0e8091e18edd4d8d3354b0e3a908070e0150"], 0x1a)
bind$packet(r5, 0x0, 0x0)
r10 = socket$nl_rdma(0x10, 0x3, 0x14)
sendmsg$RDMA_NLDEV_CMD_GET_CHARDEV(r10, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000040)={0x1c, 0x140f, 0x1, 0x0, 0x0, "", [@RDMA_NLDEV_ATTR_CHARDEV_TYPE={0xc, 0x45, 'rdma_cm\x00'}]}, 0x1c}}, 0x0)
connect$x25(r5, &(0x7f0000000080), 0x12)
r11 = socket$inet6(0xa, 0x800000000000002, 0x0)
socket$unix(0x1, 0x1, 0x0)
setsockopt$SO_TIMESTAMPING(r11, 0x1, 0x25, &(0x7f0000000340)=0x152, 0x4)
setsockopt$inet6_int(r11, 0x29, 0x2, &(0x7f0000000000)=0xb0, 0x4)
setsockopt$SO_TIMESTAMP(r11, 0x1, 0x23, &(0x7f0000000200)=0x7fff, 0x4)
sendmmsg$inet6(r11, &(0x7f00000002c0)=[{{&(0x7f0000000140)={0xa, 0x4e23, 0x7, @local}, 0x1c, 0x0}}], 0x1, 0x24000000)
recvmmsg(r11, &(0x7f0000000900)=[{{0x0, 0x0, 0x0, 0x0, &(0x7f0000001f80)=""/121, 0xfffffffffffffd49}, 0xdb31}, {{0x0, 0x0, &(0x7f0000000580)=[{&(0x7f0000000500)=""/81}]}, 0x9}, {{&(0x7f00000005c0)=@rxrpc=@in4={0x21, 0x0, 0x2, 0x0, {0x2, 0x0, @initdev}}, 0x0, &(0x7f0000000780)=[{&(0x7f00000009c0)=""/215}, {&(0x7f0000000740)=""/15}], 0x0, &(0x7f00000007c0)=""/36}, 0xffff}], 0x1, 0x40002042, 0x0)
setsockopt$inet_sctp6_SCTP_PEER_ADDR_PARAMS(r3, 0x84, 0x9, &(0x7f0000000140)={0x0, @in={{0x2, 0x0, @rand_addr=0x64010100}}, 0x0, 0x0, 0x0, 0x8, 0x7f0dbe3ac64a03d9}, 0x9c)

12.257835353s ago: executing program 5 (id=7917):
r0 = socket$nl_route(0x10, 0x3, 0x0)
sendmsg$nl_route(r0, &(0x7f0000000280)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000040)=ANY=[@ANYBLOB="74000000100003050000000000000a1a90e30000", @ANYRES32=0x0, @ANYBLOB="00000000010000004c0012800c0001006d6163766c616e003c00028008000100100000001c00058018000400aaaaaaaaaabb000002000400d8928a2ced1fe60008000300030000000a000400aa"], 0x74}}, 0x0) (async, rerun: 64)
r1 = socket$nl_netfilter(0x10, 0x3, 0xc) (rerun: 64)
sendmsg$NFT_MSG_GETFLOWTABLE(r1, &(0x7f0000000340)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f0000000680)={0x14, 0x17, 0xa, 0x101, 0x0, 0x0, {0x2}}, 0x14}, 0x1, 0x0, 0x0, 0x80}, 0x0) (async)
bpf$PROG_LOAD(0x5, &(0x7f00000017c0)={0x3, 0xe, &(0x7f0000000200)=ANY=[@ANYBLOB="b700000034000000bca30000000000002403000040feffff720af0ff0000000071a4f0ff000000001f030000000000002e0a0200000000002600000000ff000e61145b00000000001d430000000000007a0a00fe00581c1f6114140000000000b503f7fff80000009500000000000000033bc065b78111c6dfa041b63af4a3912435f1a864a7aad58db6a693002e7f3be361917adef6ee1c8a2a4f8ef1e50becb19bc461e91a7168e5181554a090f30002af51efd601b6bf01c8e8b1fee5bef7af9aa0d7d600c095199fe3ff3128e599b0eaebbdbd732c9cc00eec363e4a8f6456e2cc21557c0afc646cb7798b3e6440c2fbdb00a3e35208b0bb0d2cd829e65440000000000000000028610643a98d9ec21ead2ed51b104d4d91af25b845b9f7d08d123deda88c658d42ecbf28bf7076c15b463bebc72f526dd70252e79166d858fcd0e06dd31af9612fa402d0b11008e59a5923906f88b53987ad1714e72ba7d06a59ff616236fd9aa58f0177184b6a89adaf17b0a6041bdef728f5089048ddff6da40f9411fe7226a40409d6e37c4f46756d31cb467600ade70063e5291569b33d21dae356e1c51f03a801be8189679a16da18ec0ae564162a27afea62d84f3a10076443d643649393bf52d2105bd901128c7e0ec82701c8204a1deeed4155617572652d950ad31928b0b036dc2869f478341d02d0f5ad94b081fcd507acb4b9c67382f13d000000225d85ae49cee383dc5049076b98fb6853ab39a21514da60d2ae20cfb91d6a49964757cdf538f9ce2bdbb9893a5de817101ab062cd54e67051d355d84ce97bb0c6b6a595e487a2cc47c0efbb2d71cde2c10f0bc6980fe78683ac5c0c31032599dd273863be9261eee52216d009f4c52048ef8c126aeef5f510a8f1aded94a129e4aec6e8d9ab06faffc3a15d91c2ea3e2e04cfe031b287539d0540059fe6c7fe7cd8697502c7596566de74e425da5e7f009602a9f61d3804b3e0a1053abdc31282dfb15eb6841bb64a1b3045024a982f3c48b936e6f9e0fcda88fe4413537528fdb6153baae244e7bf573eac34b781337ad5901a4cad2422ee965a38f7defbd2960242b104e20dc2d9b0c35608d402ccdd9069bd50b994fda7a9de44022a579dfc0229cc0dc98816106dec28eaeb883418f562ae00003ea96d10f172c0374d6eed826416050000000bfe9b4a9c5a90ff59d54d1f92ecc48899b212c55318294270a1ad10c80fef7c24d47afcc829ba0f85da6d888f18ea40ab959f6074ab2a40d85d1501783a7ab51380d7b4ead35a385e0b4a26b602396df7e0c1e02b88c114f244a9bf93f04bf072f0861f5c0b000000000000eedcf2ba1a9508f9d6aba582a896a9f1ffa968eacea75caf822a7a63ba3401e6a52acb1188883ad2a3b1832371fe5bc621426d1ed01b389708165b9cdbae2ed9dc7358f0ebadde0b727f27feeb7464dcc536cbae2f5c7d951680f6f2f9a6a8346962a350845ffa0d82884f79adc287906943408e6df3c391e97ba48db0a5adbfd03aac93df8866fb010ae20e92bed1fe39af169d2a466f0db6f3d9436a7d55fc30511d00000000c95265b2bd83d648532869d701723fedcbada1ee7baa19faf67256b56a41fd355b6a686b50f0937f778af083e055f6138a757ebd0ed91124a6b244f9acf41ac5d73a008364e0606a594817031fc2654026c6ea08b83b123145ab5703dad844ceb201efeb6dc5f6a9037d2283c42efc54dd84323afc4c10eff46248843187f1dd48ef0900000000000000ff0f4000000000f00700003c17888e1cdba94a6ea80c33ead5722c3293a493f1479531dd88261458f40d31fe8df15efaaeea831555877f9538c6ee6ba65893ff1f908ba7554ba583ec7932f5954f31a878e2fae6691d1aee1da02ba516467df3e7d1daac43738612e4fee18a22da19fcdb4c1011e32f808890205f0e6da2819d2f9e77c7c64affa54fec0136cbafa5f62e96753b639a924599c1f69219927ea5301fff0a6063d427180d61542c2571f983e96635600000554f327a3535e7c7542799493c31ac05a7b57f03ca91a01ba2a30ca99e969d6fd09dc28ebc15edb4d91675767999d146aef7799738b292fd64bbca48568325b2969e2b15f36b788bce5ccdbaf75c94cb93499f6947a967a794963442aece449a0d80010f5c653d22d49030a8c2a4ab595bf4238f18ca428dafc7ac96d404607a0000000051a2104f22e6db5a62b5089c1b45282d38864daa3ae81d6b0968d1d2869291b7d12096833d6864da40b54783a17aaeb6737c323f9f98e354cc98dcfe23ad01bd1c61563e69ffe1c2c73e16e637d4219ef7ec61261173f359e93d2c5e424c17998809ec8f0232b3955e052a4cecd89008f70314a0bdd491ecab5d232f89fe0120f64c62e8e3ed8bcb45202c204bbec8d722824c0ebca8db1ea4a05e41f6016ab5bbe4fe7ff5d785d0128171c90d9900ca2532b0f9d01c4b45294fbba468df3e1b393cb4e62e753b4172ba7ac1f2b51c94bc5d047899fd219f448bf9189c65c9d91eda6b52a373803a9efe44f86909bc90addbc4b3093c91b8068c5adfcb0d7fd849904568916694d461b76a58d88cf0f520310a1e9fdc18cde98d662eee077515d0a881192292ffff5392ab3d1311b82432662806add87047f601fa888400000000000000000000000000006acc19808d7cf29bc974b0ea92499a41b9b9a7c2bca311a28ee4952f2d325a56397c78f12205db653a536f0100e0eda300a43a13bd1b9f3322405d1efd78e578dc6b3fb84f3738a4b6caa800000087efa51c5d95ecba4e50e529d1e8c89600e809dc3d0a2f65579e23457949a50f2d0455cf699b3746979f99f6a1527f004f37e84fb478199dc1020f4beb98b8074bf7df8b5e783637daf121f175a81cffff4ac55a4385e9a617aa6c8e10d4202c5afeb06e2f9115558ea12f92d7ae543d44086b3f03b20d546fa66a72e38207c9d20035abc46271a30f1240de52536941242d23896ab74a3c6670fdc49c14f34fc4eadd6db8d80aba439772bf60a1db18c472dafc5569adc2c406f39f82928d2a1ffe29f1a57d3f18f4edaeb5d37918e6fddcd821da67a0785585a4443440dc65600e64a4a274000000000000000000000000000000000000000000000009dd14b38f2f5426d7cf5075047c31f6ce6adddfe3ac649c0643c8bfbeb14ba1fd7a485aa893915cf81e29aaf375e904bbe52691a4120260ffcd030000006d291ebcef893e1b9ccb6797d0646fe0e7274434f28efb43e06e64f0698caca42f4e6018a455736c482a017e2b13dac4a90faa109f0e87cc94e3efb649692456463ca74aa6ad4bf50c1acb3928143be1c1023a375e528285544d0064b98646f3109e9a4942ce42c6e7ec84b664f6c2770803f10b0a1fcbfc309381aeba191950bae71f37f1eb7ceeffb3c0547ac6571603adbfde4c8b5f8d7f4b854441613633b48865b65bdc415e1e0dcf672d68cf4cebf04f4bc1eebf560a26d3b332240d450fdb0a9a69f432e277f3a0386eb2bd1305c821c64757f786b79fef54dbe64c67d73934bc80b2133fb3c04cc7ea48bf97a6243c9f95dcbddecf45f008f1822c7868e1ff5a3cff5d6b6898335792749df7b1f51e91f8c1c3b1b93b33aaa3fab69cef08a9f6f6cf39dea3d878b2ed42545421970cc426e644332bc956d1c6adefdf0ede2c5c94aa632646ae225accdf031f611d01622921f1b922a5ac887cca3136133dce8d9f5f4da7bed2ea5d94362200000000000000000000f296b0c1484e5f781ad26bff696b05ff0a5e2270e07e18b04273bd4075ea38ab463bfa6a38e7c537498ba3e4df8dfc9e8c0a0d213c3ffad44d2a376def42e41e9fc3167a257e040fa7cf32c221aaac6cfdeb33c27500001a0000000000000000000017350000c11ae694b0c69c2c03f6790044a357e785af6e153d5f1ea460af92c7cbbd6295afe740f5e154346d483e0d10522a7a945b93fb705b95b6aae27a8fab1e6984c8bdc12360627137ab6737b68ab08a1a4b94cb29a74dc36b51209cfbc87f61182bbeb2772e9d5a1ffc477179be481ffe46a4ce86be0b1f8eee42a611a3d44ca450b14586ed63dd92005c79e4a8ab8a94f0b74903580ac98708007c80d6c7d0de4614195e40d797c0348dd70f36a220e8b3710fb5358c27e90793bcb9ee6319342c4b239ca8cbc6fc83d32e6eb62ad92e43991f2447be9c2a1ae1119eafb901a43d57e885116d19aa152bfb89f8d0b2516f80120a1cddff771657f3d0288ec3899f1e3ba0151c4037148fb479de703fc52b6573349c28d1b107d859b4961324c17756dde99de1924a1d2b7095d34a55060f47f4407d89acf9f1d2156befec432e8e993c79027b7ef285b20c2e6b3d0491d0d3591b0d94713332b6b79c8297117b0d14eff64e0aca8a4b4aa773d8fba1217e9519952419bb9dd998d0ec870ff00b6d556018602738fbc6cec89d6dd13cf55b96f6fe9a137d2d6a56ad78e52c23ed080000000000002bc261a781fd14126c146a0aac4221839a4b9bbf61e4bba695a41e2109eba8e40c370267cc51ffadbd15cafc97a4d3edfdcb9b5729307c6bdaf7b69325fb05fa8a9869de0600ee477d71bf3e36d1d9019edfa27aae24b632f251df210c86a18fae731ecb8b0d48357378caf2b6789509b1bacfd4fa812dc341875cfa5e798bbf59770000000000000000c8a594ea3c3347962d9113b1fecdfad5a8da641053f02e49456f5d21674521e67a5b18ea451eccf69dd6af928d2d68da9304a296c22fdc0500000000000000b1aade386b113045033a6188d56e675564d8cb8d5b40114b0f5bf15dd64c9ece60b8588ee8777d0ea8f4713b258427c7d90f9e93348e17723ba9ab8ae790f74cc41ae5795835f3cec40dff485d2802c08611454d9ea784a205bcc07ec26f906f3cf45bb37014ab6f22af6213618e242b283ea9d3f0677ee598072ec06f7170009d92bb87d9d12c378dfd3e74ec056ee83eef666423d934fc5908c9ff98715218a5964f1e00000000426ac9588e27aefe307f49662990ee823568bbc2f89596ced7c6c52d76b8096f1848410843b93fd404f535be474f456778b5ef85abb8fc2336abd5ea64a6efea8a5aca0015499b88ae780a7bae4df603bd3c72808cf300440b1b638a6640f7de8d0d82f359ca2f779cd48cd8d3603f4f69e47f386988c9b7b5d6dd3d48a1fdca780049d7c87bea42161a4c0d7cf0125b43dc9d8845f3c05a08acda647e7143d0e0aee2949a45e28488b0522c2288072467d2afe269f589fb7e034b92d3ca245b16b71998711bfe206c9690b6d0eebb06a29349229eb45ff15c63aa2c82c56d7420738cd1b04eb16e87cb524315d7361ea3635d3799bb7fcc56aa5e1dbe031a7a12554dee6754b72f43a6fddf427f32ec3df274a88097725679769beebf1aa6eb09d5154e4900000000000d0f7160a05911d969879953d3d4702b2676c07bb0fd14020a66718378825d5ed789711b77d40dc31e0b8fc651b45559da463f0000000000000000000000000052d42124e9c26aba885015e69d42ecd710342ac597ebea576ae15fdf611356f622e831741ab15549e0d7a2bd0324e2b3b48a10551607492c19eaf58485feb4cab19c303b30ba2ddea0d792d77724c9fa4ed58b93668fc20484f141ee2b6a0029e88fdc853189b4dafd36ff23b11967090e508f45e3f10857038a52ef275cf9e3e4b5d30b12d138dfa70930c603b5e3f4b7be67be3dba3cbd8d4d143195af0697d779445d67dcfbd922d12a8b49f93eac7a72faacf80346b3b669615f2710eb8df39fc8c04d2c9c196fa6facfea613569a35cde6451f2edf55ce25c7d72ec7ea85a92458c0559ca3a94727d495bd4671a55a70bc544d71d8e0257707a31936f1adf224077310a86bf447ec92c650acca8c6b0721020894b06178c32f4472d17174d6eb2b067030c5d2c12583f46d2da7fba42d4083259c7cdc8bf1f4299c248865d3c809356c3ed"], &(0x7f00000001c0)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @sched_cls, 0xffffffffffffffff, 0x8, &(0x7f0000000000), 0xffffffffffffff97, 0x10, &(0x7f00000000c0), 0xffffffffffffffc2}, 0x48)

11.975487389s ago: executing program 5 (id=7923):
r0 = socket$inet6_tcp(0xa, 0x1, 0x0)
r1 = socket$inet6_sctp(0xa, 0x1, 0x84)
connect$inet6(r1, 0x0, 0x0)
setsockopt$inet6_tcp_int(r0, 0x6, 0x13, &(0x7f0000000000)=0x100000001, 0x4)
r2 = socket$nl_route(0x10, 0x3, 0x0)
ioctl$sock_SIOCGIFINDEX(r2, 0x8933, &(0x7f0000000040)={'tunl0\x00', <r3=>0x0})
r4 = openat$tun(0xffffffffffffff9c, &(0x7f00000001c0), 0x100, 0x0)
ioctl$TUNSETIFF(r4, 0x400454ca, &(0x7f0000000040)={'syzkaller0\x00', 0x7101})
r5 = socket(0x10, 0x3, 0x0)
r6 = socket$netlink(0x10, 0x3, 0x0)
bind$netlink(r6, &(0x7f0000514ff4)={0x10, 0x0, 0x0, 0x2ffffffff}, 0xc)
sendmsg$nl_route_sched(r5, &(0x7f0000000200)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f0000001cc0)=@newtaction={0x18, 0x31, 0x1, 0x0, 0x0, {}, [{0x4}]}, 0x18}}, 0x0)
r7 = socket(0x400000000010, 0x3, 0x0)
r8 = socket$unix(0x1, 0x1, 0x0)
ioctl$sock_SIOCGIFINDEX(r8, 0x8933, &(0x7f0000000100)={'syzkaller0\x00', <r9=>0x0})
sendmsg$nl_route_sched(r7, &(0x7f00000012c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f00000005c0)=@newqdisc={0x38, 0x24, 0x4ee4e6a52ff56541, 0x70bd2d, 0xffffffff, {0x0, 0x0, 0x0, r9, {0x0, 0xfff1}, {0xffff, 0xffff}, {0xf, 0xb}}, [@qdisc_kind_options=@q_multiq={{0xb}, {0x8, 0x2, {0x28}}}]}, 0x38}}, 0x0)
r10 = socket(0x400000000010, 0x3, 0x0)
ioctl$sock_SIOCGIFINDEX(0xffffffffffffffff, 0x8933, &(0x7f0000000100)={'syzkaller0\x00', <r11=>0x0})
sendmsg$nl_route_sched(r10, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000300)={&(0x7f0000000140)=@newtfilter={0x70, 0x2c, 0xd27, 0x30bd29, 0x25dfdbfd, {0x0, 0x0, 0x0, r11, {0xf, 0xf}, {}, {0x7, 0xd}}, [@filter_kind_options=@f_cgroup={{0xb}, {0x40, 0x2, [@TCA_CGROUP_EMATCHES={0x3c, 0x3, 0x0, 0x1, [@TCA_EMATCH_TREE_LIST={0x30, 0x2, 0x0, 0x1, [@TCF_EM_CANID={0x14, 0x1, 0x0, 0x0, {{0x800, 0x7, 0x1}, {{0x0, 0x0, 0x1}, {0x3, 0x1, 0x1}}}}, @TCF_EM_CMP={0x18, 0x2, 0x0, 0x0, {{0xe85, 0x6e4, 0xc}, {0x4, 0x80000000, 0x3, 0x1, 0xf, 0x1}}}]}, @TCA_EMATCH_TREE_HDR={0x8, 0x1, {0x6e4}}]}]}}]}, 0x70}, 0x1, 0x0, 0x0, 0x10}, 0x0)
r12 = socket(0x400000000010, 0x3, 0x0)
r13 = socket$unix(0x1, 0x1, 0x0)
ioctl$sock_SIOCGIFINDEX(r13, 0x8933, &(0x7f0000000100)={'syzkaller0\x00', <r14=>0x0})
sendmsg$nl_route_sched(r12, &(0x7f0000006040)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000006100)=@delchain={0x24, 0x65, 0x1, 0x70bd2e, 0x25dfdbff, {0x0, 0x0, 0x0, r14, {0x0, 0xfff3}, {}, {0xb}}}, 0x51}, 0x1, 0x0, 0x0, 0x8848}, 0x20004804)
sendmsg$nl_route_sched(r2, &(0x7f0000001200)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000440)=@newqdisc={0x148, 0x24, 0x4ee4e6a52ff56541, 0x70bd2a, 0xfffffffe, {0x0, 0x0, 0x0, r3, {0x0, 0x1}, {0xffff, 0xffff}, {0x16}}, [@qdisc_kind_options=@q_red={{0x8}, {0x11c, 0x2, [@TCA_RED_STAB={0x104, 0x2, "09000000000000208f29d158039b90627d7b60f0d5ca47f33eed46409b7c8722ce020df6b24c2e6ac7b97dc04d01be2092874115214b1ebb764511f69cd1e9f6263346363d2c639c76000067af25166c2f0f85f36aa8867406119c010400002e31dea98204000000d560eae59ea49ef95d73202a6e3b5e1eb38244e694e7410d33bc92794ad27031f2a19698b5142ddf36e2a876a4fc871207bf12a84f1d4d132f5bb7edcf2d08d677e6a7268e106b6ced3c7f53df24092ddb9e0fac6a1153c3fc88bfd1404fef22cf3e825a6e19c6a48a5444eabb459ac3ec9a278df4011773d2f2e6529ed0ad424b47ec67522477f979360b76d1008000"}, @TCA_RED_PARMS={0x14, 0x1, {0x3f26, 0x7, 0x81, 0xc, 0xb, 0x14, 0x5}}]}}]}, 0x148}}, 0x0)

11.718489827s ago: executing program 5 (id=7928):
r0 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10)
r1 = socket$packet(0x11, 0x2, 0x300)
mmap(&(0x7f0000000000/0x95c000)=nil, 0x95c000, 0x200000b, 0x8c4b815a5465c2b2, 0xffffffffffffffff, 0x0)
r2 = socket$alg(0x26, 0x5, 0x0)
bind$alg(r2, &(0x7f0000000000)={0x26, 'hash\x00', 0x0, 0x0, 'sha512\x00'}, 0x58)
r3 = accept4$inet(0xffffffffffffffff, &(0x7f0000000240)={0x2, 0x0, @broadcast}, &(0x7f00000002c0)=0x10, 0x80000)
r4 = getuid()
setsockopt$inet_IP_XFRM_POLICY(r3, 0x0, 0x11, &(0x7f00000004c0)={{{@in6=@private0={0xfc, 0x0, '\x00', 0x1}, @in6=@dev={0xfe, 0x80, '\x00', 0x1b}, 0x4e21, 0x400, 0x4e23, 0x7, 0xa, 0x20, 0x20, 0x2, 0x0, r4}, {0x45c1750b, 0x6, 0x1, 0x800, 0xfffffffffffffff7, 0xc860, 0x93e, 0x80}, {0x939, 0x2, 0x9, 0xffffffffffffffff}, 0x81, 0x6e6bb4, 0x0, 0x1, 0x2, 0x2}, {{@in6=@initdev={0xfe, 0x88, '\x00', 0x1, 0x0}, 0x4d6, 0xff}, 0x2, @in=@multicast1, 0x3501, 0x3, 0x2, 0x7, 0x6, 0x2}}, 0xe8)
r5 = accept4(r2, 0x0, 0x0, 0x800)
sendmmsg$alg(r5, &(0x7f0000000640)=[{0x0, 0x0, &(0x7f0000000380)=[{&(0x7f0000000140)="b57523cb1a2c90d8acad2e2d98dfc9ea7a5843c3b63b683ced2b3266175599b779617e66e6b3e15c042be90635a2d36160bbf9a2edcacc0bbe015b84150a1928de94397894ff36aa430fc2a0814ba634308d6d0837250dfd1eca5383f9d151449743b1a0c4ffc51242a229c5d6d06f147a61d797ea7ffeda95b76f5623", 0x7d}, {&(0x7f00000001c0)="66f7", 0x4}, {&(0x7f0000000300)='l3', 0x7fffef80}], 0x3}], 0x1, 0x0)
setsockopt$packet_tx_ring(r1, 0x107, 0xd, &(0x7f0000000100)=@req3={0x10000, 0x100000001, 0x10000, 0x1}, 0x1c)
mmap(&(0x7f0000ff0000/0x10000)=nil, 0x10000, 0xc, 0x13012, r1, 0x0)
r6 = socket$kcm(0x2d, 0x2, 0x0)
r7 = bpf$PROG_LOAD(0x5, &(0x7f0000000400)={0x5, 0xb, &(0x7f0000000180)=ANY=[@ANYBLOB="18080000000000000000000000000000180100002020702500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b703000000000000850000000700000095"], &(0x7f00000000c0)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x16, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94)
sendmsg$kcm(0xffffffffffffffff, &(0x7f0000000940)={0x0, 0x0, &(0x7f0000000180)=[{&(0x7f0000000000)="d8001c00180081064e81f782db44b9b545c7910006007c09", 0x18}], 0x1}, 0x0)
ioctl$sock_kcm_SIOCKCMATTACH(r6, 0x89e3, &(0x7f0000000180)={r6, r7})
r8 = socket$nl_route(0x10, 0x3, 0x0)
sendmsg$nl_route(r8, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000080)=@newlink={0x38, 0x10, 0x403, 0x0, 0x0, {}, [@IFLA_LINKINFO={0x18, 0x12, 0x0, 0x1, @gtp={{0x8}, {0xc, 0x2, 0x0, 0x1, [@IFLA_GTP_PDP_HASHSIZE={0x8, 0x3, 0x1}]}}}]}, 0x38}}, 0x0)
r9 = syz_genetlink_get_family_id$nl802154(&(0x7f0000000080), r0)
sendmsg$NL802154_CMD_SET_SEC_PARAMS(r0, &(0x7f00000001c0)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x100}, 0xc, &(0x7f0000000200)={&(0x7f0000000100)={0x1c, r9, 0x2, 0x70bd29, 0x25dfdbfe, {}, [@NL802154_ATTR_SEC_FRAME_COUNTER={0x8, 0x2c, 0x7}]}, 0x1c}, 0x1, 0x0, 0x0, 0x4000}, 0x20000050)
r10 = syz_genetlink_get_family_id$ieee802154(&(0x7f0000000800), r0)
sendmsg$IEEE802154_ADD_IFACE(r0, &(0x7f0000000140)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000040)=ANY=[@ANYBLOB="922d93ad", @ANYRES16=r10, @ANYBLOB="eb7a2bbd7000fcdbdf2521000000050020000100000009001f007068793100000000"], 0x28}, 0x1, 0x0, 0x0, 0x4000010}, 0x40882)

2.861182801s ago: executing program 0 (id=7982):
r0 = socket$nl_generic(0x10, 0x3, 0x10)
syz_genetlink_get_family_id$nl80211(&(0x7f0000000040), 0xffffffffffffffff)
r1 = socket$nl_generic(0x10, 0x3, 0x10)
ioctl$sock_SIOCGIFINDEX_80211(r1, 0x8933, &(0x7f0000000ec0)={'wlan0\x00'})
sendmsg$NL80211_CMD_UPDATE_FT_IES(r0, 0x0, 0x94)
sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000140)={&(0x7f00000002c0)=@newlink={0x44, 0x10, 0x403, 0x70bd2a, 0x0, {0x0, 0x0, 0x74}, [@IFLA_LINKINFO={0x24, 0x12, 0x0, 0x1, @bridge={{0xb}, {0x14, 0x2, 0x0, 0x1, [@IFLA_BR_VLAN_STATS_ENABLED={0x5, 0x29, 0x1}, @IFLA_BR_VLAN_DEFAULT_PVID={0x6, 0x27, 0x4}]}}}]}, 0x44}}, 0x0)

2.699813342s ago: executing program 0 (id=7984):
r0 = syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1)
socket$packet(0x11, 0x3, 0x300)
sendmsg$nl_route(0xffffffffffffffff, 0x0, 0x4050)
r1 = socket$inet6_icmp_raw(0xa, 0x3, 0x3a)
getsockopt$IP6T_SO_GET_ENTRIES(r1, 0x29, 0x41, 0x0, 0x0)
r2 = socket$inet6_tcp(0xa, 0x1, 0x0)
listen(r2, 0x0)
bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000680)={0x10, 0x4, 0x0, &(0x7f00000000c0)='GPL\x00'}, 0x94)
bpf$MAP_UPDATE_ELEM(0x2, 0x0, 0x0)
syz_emit_ethernet(0x12, &(0x7f00000001c0)=ANY=[], 0x0)
r3 = socket$nl_route(0x10, 0x3, 0x0)
r4 = socket$l2tp(0x2, 0x2, 0x73)
r5 = socket$inet6_sctp(0xa, 0x5, 0x84)
getsockopt$inet_sctp6_SCTP_SOCKOPT_PEELOFF(r5, 0x84, 0x1c, 0x0, 0x0)
r6 = socket$nl_netfilter(0x10, 0x3, 0xc)
sendmsg$NFT_BATCH(r6, 0x0, 0x0)
r7 = socket$nl_netfilter(0x10, 0x3, 0xc)
sendmsg$NFT_BATCH(r7, 0x0, 0x0)
setsockopt$IP_VS_SO_SET_TIMEOUT(r4, 0x0, 0x48a, 0x0, 0x0)
sendmsg$nl_route_sched(r3, 0x0, 0x0)
r8 = socket$nl_generic(0x10, 0x3, 0x10)
r9 = socket$nl_generic(0x10, 0x3, 0x10)
r10 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000100), r9)
ioctl$sock_SIOCGIFINDEX_80211(r9, 0x8933, &(0x7f00000013c0)={'wlan1\x00', <r11=>0x0})
sendmsg$NL80211_CMD_FRAME(r9, &(0x7f0000001380)={0x0, 0x0, &(0x7f0000001340)={&(0x7f0000000000)=ANY=[@ANYBLOB="f4060000", @ANYRES16=r10, @ANYBLOB="01000000000000e14f003b00000008000300", @ANYRES32=r11, @ANYBLOB="d506330080000000ffffffffffff080211000001"], 0x6f4}}, 0x0)
sendmsg$NL80211_CMD_SET_WOWLAN(r8, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000140)={&(0x7f00000000c0)=ANY=[@ANYBLOB="3ed10000", @ANYRES16=r10, @ANYBLOB="00082bbd7000ffdbdf254a000000080001002900000008007580040008000c0075800400030004000300"], 0x30}, 0x1, 0x0, 0x0, 0x4000}, 0x40018)
ioctl$TUNATTACHFILTER(0xffffffffffffffff, 0x401054d5, &(0x7f0000000040)={0x36, &(0x7f00000000c0)=[{0x7}, {0x3, 0x5, 0x2c, 0x4}, {0xfac3, 0x2, 0x4, 0x2}, {0x77cf, 0x7f, 0x1, 0x80000001}, {0x7, 0x11, 0xcf, 0x7}]})
bind$bt_hci(r0, &(0x7f0000000000)={0x1f, 0xffffffffffffffff, 0x3}, 0x6)
write$bt_hci(r0, &(0x7f0000000040)=ANY=[], 0x6)

2.386477084s ago: executing program 3 (id=7987):
r0 = socket(0x40000000015, 0x5, 0x0)
bind$inet6(r0, &(0x7f0000000040)={0xa, 0x0, 0x0, @loopback}, 0x1c)
r1 = socket$nl_xfrm(0x10, 0x3, 0x6)
sendmsg$nl_xfrm(r1, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000680)=ANY=[@ANYBLOB="c0010000100001000000000000000000000000000000000000000000000000002001000000000000000000000000000200000000000000000000008001000000", @ANYRES32, @ANYRES32=0x0, @ANYBLOB="e00000010000000000000000000000000000000032000000ac1414aa000000000000000000000000000000000000000000002000000000000100000000000000000000000000000000000000000000000000000000000000ffffffffffffffff00000000000000000000000000000000ff030000000000000000000000000000000000000000000000000000000000000000000000000000000000000a000300af0000000000000048000200656362286369706865725f6e756c6c29000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000001c0017004a9245"], 0x1c0}}, 0x0)
ioctl$sock_SIOCGIFINDEX_80211(0xffffffffffffffff, 0x8933, &(0x7f0000000000)={'wlan1\x00'})
r2 = socket(0x2, 0x80805, 0x0)
getsockopt$inet_sctp_SCTP_GET_ASSOC_ID_LIST(r2, 0x84, 0x1d, &(0x7f0000000000)={0x1, [<r3=>0x0]}, &(0x7f0000000040)=0x8)
getsockopt$inet_sctp_SCTP_STATUS(r2, 0x84, 0xe, &(0x7f0000000300)={r3, 0xffff, 0x2, 0x401, 0x0, 0x236c, 0x1000, 0x5, {r3, @in={{0x2, 0x4e22, @rand_addr=0x64010100}}, 0x3, 0x9, 0x3, 0xffd7f8d, 0x80}}, &(0x7f00000000c0)=0xb0)
connect$l2tp6(r0, &(0x7f0000000200)={0xa, 0x0, 0x8, @local, 0x200000, 0x2}, 0x20)
r4 = socket$inet_sctp(0x2, 0x5, 0x84)
setsockopt$inet_sctp_SCTP_ENABLE_STREAM_RESET(r4, 0x84, 0x76, &(0x7f0000000000)={0x0, 0x81}, 0x8)
socketpair$unix(0x1, 0x1, 0x0, &(0x7f00000010c0)={<r5=>0xffffffffffffffff})
r6 = gettid()
ioctl$sock_SIOCSPGRP(r5, 0x8902, &(0x7f0000000000)=r6)
getsockopt$inet6_IPV6_IPSEC_POLICY(r0, 0x29, 0x22, &(0x7f0000000080)={{{@in6=@remote, @in6, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, <r7=>0x0}}, {{@in=@loopback}, 0x0, @in=@remote}}, &(0x7f0000000000)=0xe8)
setsockopt$sock_cred(r4, 0x1, 0x11, &(0x7f00000001c0)={r6, r7}, 0xc)
sendto$inet6(r0, 0x0, 0x0, 0x0, &(0x7f0000000240)={0xa, 0x0, 0x3, @loopback, 0xfffffffc}, 0x1c)

2.23261482s ago: executing program 3 (id=7988):
r0 = socket(0x1e, 0x1, 0x0)
r1 = socket$packet(0x11, 0x3, 0x300)
ioctl$sock_SIOCGIFINDEX(r1, 0x8933, &(0x7f0000000080)={'veth0\x00', <r2=>0x0})
setsockopt$packet_add_memb(r1, 0x107, 0x1, &(0x7f0000000040)={r2, 0x1, 0x6, @dev={'\xaa\xaa\xaa\xaa\xaa', 0x2a}}, 0x10)
setsockopt$packet_add_memb(r1, 0x107, 0x1, &(0x7f00000004c0)={r2, 0x3, 0x6, @remote}, 0x10)
close(0x3)
sendmmsg$alg(r0, &(0x7f0000009480)=[{0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x20040081}], 0x1, 0x40)
r3 = socket$nl_netfilter(0x10, 0x3, 0xc)
sendmsg$NFT_BATCH(r3, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000440)={{0x14, 0x10, 0x1, 0x0, 0x0, {0x1}}, [@NFT_MSG_NEWTABLE={0x20, 0x0, 0xa, 0x401, 0x0, 0x0, {0x1, 0x0, 0x8003}, [@NFTA_TABLE_NAME={0x9, 0x1, 'syz0\x00'}]}, @NFT_MSG_NEWCHAIN={0x2c, 0x3, 0xa, 0x101, 0x0, 0x0, {0x1}, [@NFTA_CHAIN_TABLE={0x9, 0x1, 'syz0\x00'}, @NFTA_CHAIN_NAME={0x9, 0x3, 'syz2\x00'}]}, @NFT_MSG_NEWRULE={0x98, 0x6, 0xa, 0x401, 0x0, 0x0, {0x1, 0x0, 0x40}, [@NFTA_RULE_CHAIN_ID={0x8}, @NFTA_RULE_EXPRESSIONS={0x70, 0x4, 0x0, 0x1, [{0x34, 0x1, 0x0, 0x1, @exthdr={{0xb}, @val={0x24, 0x2, 0x0, 0x1, [@NFTA_EXTHDR_DREG={0x8, 0x1, 0x1, 0x0, 0xc}, @NFTA_EXTHDR_OFFSET={0x8}, @NFTA_EXTHDR_LEN={0x8, 0x4, 0x1, 0x0, 0x22}, @NFTA_EXTHDR_TYPE={0x5, 0x2, 0x7}]}}}, {0x38, 0x1, 0x0, 0x1, @bitwise={{0xc}, @val={0x28, 0x2, 0x0, 0x1, [@NFTA_BITWISE_LEN={0x8, 0x3, 0x1, 0x0, 0x2}, @NFTA_BITWISE_SREG={0x8, 0x1, 0x1, 0x0, 0x14}, @NFTA_BITWISE_DREG={0x8, 0x2, 0x1, 0x0, 0x12}, @NFTA_BITWISE_OP={0x8, 0x6, 0x1, 0x0, 0x4}, @NFTA_BITWISE_MASK={0x62}]}}}]}, @NFTA_RULE_TABLE={0x9, 0x1, 'syz0\x00'}]}], {0x14, 0x11, 0x1, 0x0, 0x0, {0x7}}}, 0x10c}}, 0x0)
r4 = socket(0x10, 0x80003, 0x0)
write(r4, &(0x7f0000000000)="240000001a005f0214f9f407000904000a000000fe0000000000000008000f00fd000000", 0x85)

2.142896561s ago: executing program 0 (id=7989):
r0 = socket$nl_route(0x10, 0x3, 0x0)
r1 = socket(0x848000000015, 0x805, 0x0)
sendto$inet6(r1, 0x0, 0x0, 0x0, &(0x7f0000000040)={0xa, 0x0, 0xf444, @ipv4={'\x00', '\xff\xff', @broadcast}}, 0x1c)
r2 = syz_genetlink_get_family_id$ipvs(&(0x7f0000000180), r1)
sendmsg$IPVS_CMD_NEW_SERVICE(r1, &(0x7f00000002c0)={&(0x7f0000000100)={0x10, 0x0, 0x0, 0x4000}, 0xc, &(0x7f0000000240)={&(0x7f00000001c0)={0x58, r2, 0x60a, 0x70bd27, 0x25dfdbff, {}, [@IPVS_CMD_ATTR_SERVICE={0x4}, @IPVS_CMD_ATTR_SERVICE={0x20, 0x1, 0x0, 0x1, [@IPVS_SVC_ATTR_FWMARK={0x8}, @IPVS_SVC_ATTR_PROTOCOL={0x6, 0x2, 0x73}, @IPVS_SVC_ATTR_FLAGS={0xc, 0x7, {0x0, 0x8}}]}, @IPVS_CMD_ATTR_TIMEOUT_TCP={0x8, 0x4, 0x3}, @IPVS_CMD_ATTR_TIMEOUT_UDP={0x8, 0x6, 0x2}, @IPVS_CMD_ATTR_TIMEOUT_UDP={0x8, 0x6, 0x2}, @IPVS_CMD_ATTR_TIMEOUT_UDP={0x8, 0x6, 0x1000000}]}, 0x58}, 0x1, 0x0, 0x0, 0x10}, 0x200008d0)
sendmsg$IPSET_CMD_GET_BYNAME(r1, &(0x7f00000000c0)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x20}, 0xc, &(0x7f0000000080)={&(0x7f0000000040)={0x38, 0xe, 0x6, 0x3, 0x0, 0x0, {0x0, 0x0, 0x5}, [@IPSET_ATTR_SETNAME={0x9, 0x2, 'syz0\x00'}, @IPSET_ATTR_SETNAME={0x9, 0x2, 'syz1\x00'}, @IPSET_ATTR_SETNAME={0x9, 0x2, 'syz2\x00'}]}, 0x38}, 0x1, 0x0, 0x0, 0x80}, 0x1)
sendmsg$nl_route(r0, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000300)=ANY=[@ANYBLOB="40080000000010000000000000000000fb9bb1b72a93dcda81e0fd11fc9d8d91838b8152e3f4a141e20385", @ANYRES32=0x0, @ANYBLOB="000000000000000014001280090001007665746800000000040002800a000100aaaaaaaaaa000000"], 0x40}}, 0x0)
socket$nl_route(0x10, 0x3, 0x0) (async)
socket(0x848000000015, 0x805, 0x0) (async)
sendto$inet6(r1, 0x0, 0x0, 0x0, &(0x7f0000000040)={0xa, 0x0, 0xf444, @ipv4={'\x00', '\xff\xff', @broadcast}}, 0x1c) (async)
syz_genetlink_get_family_id$ipvs(&(0x7f0000000180), r1) (async)
sendmsg$IPVS_CMD_NEW_SERVICE(r1, &(0x7f00000002c0)={&(0x7f0000000100)={0x10, 0x0, 0x0, 0x4000}, 0xc, &(0x7f0000000240)={&(0x7f00000001c0)={0x58, r2, 0x60a, 0x70bd27, 0x25dfdbff, {}, [@IPVS_CMD_ATTR_SERVICE={0x4}, @IPVS_CMD_ATTR_SERVICE={0x20, 0x1, 0x0, 0x1, [@IPVS_SVC_ATTR_FWMARK={0x8}, @IPVS_SVC_ATTR_PROTOCOL={0x6, 0x2, 0x73}, @IPVS_SVC_ATTR_FLAGS={0xc, 0x7, {0x0, 0x8}}]}, @IPVS_CMD_ATTR_TIMEOUT_TCP={0x8, 0x4, 0x3}, @IPVS_CMD_ATTR_TIMEOUT_UDP={0x8, 0x6, 0x2}, @IPVS_CMD_ATTR_TIMEOUT_UDP={0x8, 0x6, 0x2}, @IPVS_CMD_ATTR_TIMEOUT_UDP={0x8, 0x6, 0x1000000}]}, 0x58}, 0x1, 0x0, 0x0, 0x10}, 0x200008d0) (async)
sendmsg$IPSET_CMD_GET_BYNAME(r1, &(0x7f00000000c0)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x20}, 0xc, &(0x7f0000000080)={&(0x7f0000000040)={0x38, 0xe, 0x6, 0x3, 0x0, 0x0, {0x0, 0x0, 0x5}, [@IPSET_ATTR_SETNAME={0x9, 0x2, 'syz0\x00'}, @IPSET_ATTR_SETNAME={0x9, 0x2, 'syz1\x00'}, @IPSET_ATTR_SETNAME={0x9, 0x2, 'syz2\x00'}]}, 0x38}, 0x1, 0x0, 0x0, 0x80}, 0x1) (async)
sendmsg$nl_route(r0, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000300)=ANY=[@ANYBLOB="40080000000010000000000000000000fb9bb1b72a93dcda81e0fd11fc9d8d91838b8152e3f4a141e20385", @ANYRES32=0x0, @ANYBLOB="000000000000000014001280090001007665746800000000040002800a000100aaaaaaaaaa000000"], 0x40}}, 0x0) (async)

2.0444991s ago: executing program 1 (id=7990):
socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000000)={<r0=>0xffffffffffffffff, <r1=>0xffffffffffffffff}) (async, rerun: 64)
mkdirat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000)='./cgroup/syz0\x00', 0x1ff) (rerun: 64)
r2 = socket$inet6(0xa, 0x80002, 0x0)
connect$inet6(r2, &(0x7f0000000080)={0xa, 0x4e23, 0x4, @dev={0xfe, 0x80, '\x00', 0x16}, 0x6}, 0x1c) (async, rerun: 64)
sendmmsg$inet6(r2, &(0x7f0000003cc0)=[{{0x0, 0x0, &(0x7f0000003980), 0x171}}], 0x400000000000172, 0x4001c00) (rerun: 64)
r3 = openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000), 0x200002, 0x0)
r4 = openat$cgroup_type(r3, &(0x7f0000000100), 0x2, 0x0)
sendfile(r4, r4, 0x0, 0x6)
r5 = socket$nl_generic(0x10, 0x3, 0x10) (async, rerun: 32)
r6 = syz_genetlink_get_family_id$devlink(&(0x7f00000000c0), 0xffffffffffffffff) (async, rerun: 32)
ioctl$sock_FIOGETOWN(r0, 0x8903, &(0x7f0000000140)=<r7=>0x0) (async, rerun: 32)
r8 = syz_open_procfs$namespace(0x0, &(0x7f0000000840)='ns/time_for_children\x00') (rerun: 32)
ioctl$NS_GET_OWNER_UID(r8, 0x8008b70d, 0x0) (async, rerun: 64)
r9 = ioctl$NS_GET_PARENT(0xffffffffffffffff, 0xb702, 0x0) (async, rerun: 64)
ioctl$sock_SIOCGPGRP(r1, 0x8904, &(0x7f0000000180)=<r10=>0x0)
sendmsg$DEVLINK_CMD_RELOAD(r5, &(0x7f0000000300)={&(0x7f0000000080)={0x10, 0x0, 0x0, 0x40}, 0xc, &(0x7f00000002c0)={&(0x7f00000001c0)={0xd4, r6, 0x1, 0x70bd2b, 0x25dfdbff, {}, [{@pci={{0x8}, {0x11}}, @DEVLINK_ATTR_NETNS_PID={0x8, 0x8b, r7}}, {@nsim={{0xe}, {0xf, 0x2, {'netdevsim', 0x0}}}, @DEVLINK_ATTR_NETNS_FD={0x8, 0x8a, r8}}, {@pci={{0x8}, {0x11}}, @DEVLINK_ATTR_NETNS_ID={0x8, 0x8c, 0x2}}, {@nsim={{0xe}, {0xf, 0x2, {'netdevsim', 0x0}}}, @DEVLINK_ATTR_NETNS_FD={0x8, 0x8a, r9}}, {@nsim={{0xe}, {0xf, 0x2, {'netdevsim', 0x0}}}, @DEVLINK_ATTR_NETNS_PID={0x8, 0x8b, r10}}]}, 0xd4}}, 0x24044000) (async)
ioctl$sock_ipv6_tunnel_SIOCADDTUNNEL(r1, 0x89f1, &(0x7f0000000600)={'ip6tnl0\x00', &(0x7f0000000000)={'syztnl1\x00', 0x0, 0x4, 0x8, 0x8, 0x10, 0xa, @ipv4={'\x00', '\xff\xff', @dev={0xac, 0x14, 0x14, 0x35}}, @mcast1, 0x20, 0xba08, 0xfffffc00, 0x1000}})

1.982046242s ago: executing program 6 (id=7991):
r0 = socket$nl_route(0x10, 0x3, 0x0)
r1 = socket(0x10, 0x803, 0x0)
sendmsg$nl_route(r1, &(0x7f0000000380)={0x0, 0x4076cbba9945d516, &(0x7f0000000340)={0x0, 0x14}}, 0x0)
getsockname$packet(r1, &(0x7f0000000140)={0x11, 0x0, <r2=>0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0x28a)
r3 = socket$nl_route(0x10, 0x3, 0x0)
setsockopt$llc_int(r1, 0x10c, 0x5, &(0x7f00000000c0)=0x2, 0x4)
sendmsg$nl_route(r3, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000500)={&(0x7f0000000000)=@newlink={0x40, 0x10, 0x439, 0x0, 0xfffffffc, {0x0, 0x0, 0x0, r2, 0x9801, 0x4520}, [@IFLA_LINKINFO={0x20, 0x12, 0x0, 0x1, @gre={{0x8}, {0x14, 0x2, 0x0, 0x1, [@IFLA_GRE_REMOTE={0x8, 0x7, @remote}, @IFLA_GRE_PMTUDISC={0x5}]}}}]}, 0x40}}, 0x0)
sendmsg$nl_route(r0, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000180)=@newlink={0x40, 0x10, 0x439, 0x2, 0x0, {0x0, 0x0, 0x0, r2, 0x1040}, [@IFLA_LINKINFO={0x20, 0x12, 0x0, 0x1, @gre={{0x8}, {0x14, 0x2, 0x0, 0x1, [@IFLA_GRE_REMOTE={0x8, 0x7, @local}, @IFLA_GRE_OFLAGS={0x6, 0x3, 0x81}]}}}]}, 0x40}}, 0x4040000)

1.948523519s ago: executing program 0 (id=7992):
r0 = socket$igmp(0x2, 0x3, 0x2)
getsockopt$inet_int(r0, 0x0, 0x17, &(0x7f00000001c0), &(0x7f0000000040)=0x3) (async)
r1 = openat$tun(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0)
ioctl$TUNSETIFF(r1, 0x400454ca, &(0x7f00000000c0)={'syzkaller1\x00', 0x6bf1c2d5adba8c32})
socket$inet_icmp_raw(0x2, 0x3, 0x1) (async)
r2 = socket$netlink(0x10, 0x3, 0x0)
sendmsg$nl_route(r2, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000001140)={&(0x7f0000000000)=@newlink={0x3c, 0x10, 0x503, 0x0, 0x0, {}, [@IFLA_LINKINFO={0x1c, 0x12, 0x0, 0x1, @bond={{0x9}, {0xc, 0x2, 0x0, 0x1, [@IFLA_BOND_MIN_LINKS={0x8, 0x12, 0xfffffffe}]}}}]}, 0x3c}}, 0x0) (async)
r3 = syz_init_net_socket$bt_hci(0x1f, 0x3, 0x5) (async)
close(0x4)
r4 = syz_open_procfs$namespace(0x0, &(0x7f0000000080)='ns/uts\x00')
mmap(&(0x7f0000001000/0xc00000)=nil, 0xc00000, 0x5, 0x3032, 0xffffffffffffffff, 0x0) (async)
pipe(&(0x7f0000000880)={0xffffffffffffffff, <r5=>0xffffffffffffffff}) (async, rerun: 64)
r6 = syz_genetlink_get_family_id$ethtool(&(0x7f0000000900), r2) (rerun: 64)
sendmsg$ETHTOOL_MSG_LINKMODES_SET(r5, &(0x7f0000000b00)={&(0x7f00000008c0)={0x10, 0x0, 0x0, 0x40002510}, 0xc, &(0x7f0000000ac0)={&(0x7f0000000940)={0x164, r6, 0x300, 0x70bd25, 0x25dfdbfb, {}, [@ETHTOOL_A_LINKMODES_LANES={0x8, 0x9, 0xa}, @ETHTOOL_A_LINKMODES_MASTER_SLAVE_CFG={0x5, 0x7, 0x2}, @ETHTOOL_A_LINKMODES_SPEED={0x8, 0x5, 0x9}, @ETHTOOL_A_LINKMODES_LANES={0x8, 0x9, 0xd}, @ETHTOOL_A_LINKMODES_OURS={0x128, 0x3, 0x0, 0x1, [@ETHTOOL_A_BITSET_NOMASK={0x4}, @ETHTOOL_A_BITSET_MASK={0xe7, 0x5, "93e25aaf4fdeb18c95b6f4336de5284373e0b73e65cfff4d73142b6e15a7fa68126122e6ecfc3931c3041b90c50fb66f561d5a52f7877a9a11671f3f2d6cb60a8a0cf7663cd20ea045be19039d865690fca9cbbf53ad5c5707c6f104f7614d06690d6f3928ad95ee9cca84dbdea23248e8afbd511624e699a3e486e3ce22bfffc6ddac14813467acf1e837a860cd3d1371f65650b27f8c7062d6728ee34bfb647e40d3851d6b50dc2990d44fe7221c8a200ceaefd2ea0c1888f05155bfac599362dff73641da19654ad44d0c60b7832d6fd6db71629a84d49e9362c3e959072825575a"}, @ETHTOOL_A_BITSET_BITS={0x30, 0x3, 0x0, 0x1, [{0x2c, 0x1, 0x0, 0x1, [@ETHTOOL_A_BITSET_BIT_VALUE={0x4}, @ETHTOOL_A_BITSET_BIT_NAME={0x7, 0x2, ',-\x00'}, @ETHTOOL_A_BITSET_BIT_VALUE={0x4}, @ETHTOOL_A_BITSET_BIT_INDEX={0x8, 0x1, 0xd}, @ETHTOOL_A_BITSET_BIT_INDEX={0x8}, @ETHTOOL_A_BITSET_BIT_VALUE={0x4}, @ETHTOOL_A_BITSET_BIT_VALUE={0x4}]}]}, @ETHTOOL_A_BITSET_NOMASK={0x4}, @ETHTOOL_A_BITSET_NOMASK={0x4}]}, @ETHTOOL_A_LINKMODES_MASTER_SLAVE_CFG={0x5, 0x7, 0x3}]}, 0x164}, 0x1, 0x0, 0x0, 0x20004000}, 0x0) (async)
r7 = socket$netlink(0x10, 0x3, 0x12) (async)
ioctl$F2FS_IOC_MOVE_RANGE(r3, 0xc020f509, &(0x7f0000000100)={<r8=>r4, 0xd4b, 0x2, 0xd83})
bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, &(0x7f0000000240)={{0xffffffffffffffff, <r9=>0xffffffffffffffff}, &(0x7f0000000140), &(0x7f0000000180)}, 0x20)
r10 = socket$can_j1939(0x1d, 0x2, 0x7)
ioctl$ifreq_SIOCGIFINDEX_vcan(r10, 0x8933, &(0x7f0000000280)={'vcan0\x00', <r11=>0x0})
bind$can_j1939(r10, &(0x7f0000000100)={0x1d, r11, 0x0, {}, 0xfd}, 0x18)
connect$can_j1939(r10, &(0x7f00000000c0)={0x1d, r11, 0xfffffffffffffffc, {}, 0x2}, 0x18) (async)
r12 = bpf$BPF_BTF_LOAD(0x12, &(0x7f0000000700)={&(0x7f0000000480)={{0xeb9f, 0x1, 0x0, 0x18, 0x0, 0x16c, 0x16c, 0xb, [@var={0x3, 0x0, 0x0, 0xe, 0x3}, @decl_tag={0x10, 0x0, 0x0, 0x11, 0x4, 0xa}, @union={0x6, 0x8, 0x0, 0x5, 0x1, 0x5, [{0x5, 0x3, 0x1ff}, {0xf, 0x3, 0x53}, {0xb, 0x1, 0x101}, {0x7, 0x7, 0x5}, {0xb, 0x4, 0x81}, {0x6, 0x5, 0x7}, {0x4, 0x0, 0x8}, {0x2, 0x3}]}, @restrict={0x5, 0x0, 0x0, 0xb, 0x3}, @struct={0x7, 0x7, 0x0, 0x4, 0x1, 0x7, [{0x1, 0x2}, {0x4, 0x5, 0x7fffffff}, {0x1, 0x1, 0x200}, {0x2, 0x4, 0xff}, {0x3, 0x0, 0x6}, {0x6, 0x3, 0x7}, {0xf, 0x0, 0x7f}]}, @func={0x7, 0x0, 0x0, 0xc, 0x2}, @float={0xa, 0x0, 0x0, 0x10, 0x8}, @func_proto={0x0, 0xa, 0x0, 0xd, 0x0, [{0x8, 0x3}, {0x10}, {0xe, 0x3}, {0x10, 0x3}, {0x6, 0x4}, {0x9, 0x4}, {0x2, 0x1}, {0x3, 0x3}, {0xc, 0x1}, {0xd, 0x5}]}]}, {0x0, [0x0, 0x61, 0x30, 0x5f, 0x30, 0x61, 0x61, 0x2e, 0x2e]}}, &(0x7f0000000640)=""/129, 0x18f, 0x81, 0x1, 0x2, 0x10000}, 0x28)
bpf$PROG_LOAD_XDP(0x5, &(0x7f00000007c0)={0x6, 0x18, &(0x7f0000000280)=@ringbuf={{0x18, 0x0, 0x0, 0x0, 0x7, 0x0, 0x0, 0x0, 0x1f8c}, {{0x18, 0x1, 0x1, 0x0, r8}}, {}, [@btf_id={0x18, 0x2, 0x3, 0x0, 0x3}, @tail_call={{0x18, 0x2, 0x1, 0x0, r9}}, @btf_id={0x18, 0x0, 0x3, 0x0, 0x1}], {{}, {0x7, 0x0, 0xb, 0x2, 0x0, 0x0, 0x1}, {0x85, 0x0, 0x0, 0x84}}}, &(0x7f0000000340)='syzkaller\x00', 0x5, 0xee, &(0x7f0000000380)=""/238, 0x41100, 0x8, '\x00', r11, 0x25, r12, 0x8, &(0x7f0000000740)={0x9, 0x3}, 0x8, 0x10, 0x0, 0x0, 0x0, 0x0, 0x2, 0x0, &(0x7f0000000780)=[{0x5, 0x5, 0xf, 0xb}, {0x5, 0x1, 0xd, 0xb}], 0x10, 0x2}, 0x94) (async)
sendmsg$nl_route(r7, &(0x7f0000000200)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f0000000100)=ANY=[], 0x20}, 0x1, 0x0, 0x0, 0x6044810}, 0x40000)
ioctl$TUNSETLINK(r1, 0x400454cd, 0x305)

1.800780881s ago: executing program 3 (id=7993):
r0 = socket$nl_route(0x10, 0x3, 0x0)
setsockopt$netlink_NETLINK_TX_RING(r0, 0x10e, 0xc, &(0x7f0000000040)={0x80}, 0x10)
r1 = socket$nl_generic(0x10, 0x3, 0x10)
r2 = syz_genetlink_get_family_id$mptcp(&(0x7f00000002c0), 0xffffffffffffffff)
sendmsg$MPTCP_PM_CMD_ADD_ADDR(r1, &(0x7f0000000480)={0x0, 0x0, &(0x7f0000000440)={&(0x7f0000000640)={0x20, r2, 0x1, 0x0, 0x0, {0x7}, [@MPTCP_PM_ATTR_ADDR={0xc, 0x1, 0x0, 0x1, [@MPTCP_PM_ADDR_ATTR_FAMILY={0x6, 0x1, 0x2}]}]}, 0x20}}, 0x0) (async)
sendmsg$nl_route(r0, &(0x7f0000000300)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000340)=@ipv4_newroute={0x2c, 0x1a, 0x1, 0x0, 0x0, {}, [@RTA_DPORT={0x6, 0x1d, 0xfffe}, @RTA_NH_ID={0x8, 0x1e, 0x200}]}, 0x2c}}, 0x0) (async)
r3 = socket$caif_seqpacket(0x25, 0x5, 0x5)
sendmsg$inet(r3, &(0x7f0000000880)={0x0, 0x0, 0x0, 0x0, &(0x7f0000000280)=ANY=[], 0x80}, 0x40001) (async)
r4 = socket$nl_generic(0x10, 0x3, 0x10)
getsockopt$netlink(r4, 0x10e, 0x9, 0x0, &(0x7f0000000040)) (async)
sendmsg$TEAM_CMD_OPTIONS_SET(0xffffffffffffffff, &(0x7f00000008c0)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000440)={0x58, 0x0, 0x1, 0x0, 0x0, {}, [{{0x8}, {0x3c, 0x2, 0x0, 0x1, [{0x38, 0x1, @notify_peers_count={{0x24}, {0x5}, {0x8}}}]}}]}, 0x58}}, 0x0)
r5 = socket$nl_netfilter(0x10, 0x3, 0xc)
sendmsg$NFT_BATCH(r5, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000e40)=ANY=[@ANYBLOB="140000001000010000000000000000000000000a20000000000a03000000000000000000070000000900010073797a30000000003c000000090a01de00000000000000000700000008000a40000000000900020073797a31000000000900010073797a300000000008000540000000213c0000000c0a09030000000000000000070000000900020073797a31000000000900010073797a3000000000100003800c000080080003400000", @ANYRES32], 0xc0}}, 0x0)
r6 = syz_init_net_socket$nl_rdma(0x10, 0x3, 0x10)
sendmsg$netlink(r6, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000400)=[{&(0x7f0000000440)=ANY=[@ANYBLOB="140100001400210200000000fcdbdf2502"], 0x114}], 0x1}, 0x0)

1.693416507s ago: executing program 6 (id=7994):
sendmsg$NFQNL_MSG_VERDICT(0xffffffffffffffff, &(0x7f00000002c0)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x8}, 0xc, 0x0, 0x1, 0x0, 0x0, 0x20008050}, 0x4814)
r0 = socket$nl_audit(0x10, 0x3, 0x9)
sendmsg$AUDIT_USER_AVC(r0, &(0x7f0000000400)={&(0x7f0000000300)={0x10, 0x0, 0x0, 0x1}, 0xc, &(0x7f00000003c0)={&(0x7f0000000340)={0x44, 0x453, 0x4, 0x70bd27, 0x25dfdbfc, "d98b8d359ef78c9525e8cd0455fd41ca1181c3cbd9a0eb3005e40381991c6c8574bfdd952fd6ff208e1e36f28aa88ae79b"}, 0x44}, 0x1, 0x0, 0x0, 0x4000000}, 0x50)
socket(0x3, 0x1, 0x6)

1.692784273s ago: executing program 1 (id=7995):
r0 = bpf$MAP_CREATE(0x0, &(0x7f0000000740)=@base={0x17, 0x0, 0x9, 0x3, 0x0, 0x1}, 0x48)
bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000680)={0x18, 0xf, &(0x7f00000001c0)=@ringbuf={{}, {{0x18, 0x1, 0x1, 0x0, r0}}}, &(0x7f00000000c0)='GPL\x00', 0x2, 0x8b, &(0x7f0000000100)=""/139}, 0x90)
socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000000)={0xffffffffffffffff, <r1=>0xffffffffffffffff})
close(0x3)
connect$unix(r1, &(0x7f00000000c0)=@file={0x0, './file0\x00'}, 0x6e)
bpf$BPF_PROG_WITH_BTFID_LOAD(0x5, &(0x7f0000000300)=@bpf_lsm={0x16, 0x4, &(0x7f0000000140)=ANY=[@ANYBLOB="660affffffff000061114c000000000085000000a400000095"], &(0x7f0000000040)='GPL\x00', 0x5}, 0x94)
r2 = socket$nl_route(0x10, 0x3, 0x0)
getsockopt$inet6_mreq(0xffffffffffffffff, 0x29, 0x14, &(0x7f0000000180)={@dev, <r3=>0x0}, &(0x7f00000001c0)=0x14)
sendmsg$nl_route(r2, &(0x7f0000000240)={&(0x7f0000000080)={0x10, 0x0, 0x0, 0x40}, 0xc, &(0x7f0000000200)={&(0x7f00000003c0)=@mpls_delroute={0x150, 0x19, 0x20, 0x70bd25, 0x25dfdbfe, {0x1c, 0x0, 0x10, 0x0, 0xfc, 0x2, 0xfd, 0x6, 0x2100}, [@RTA_TTL_PROPAGATE={0x5, 0x1a, 0x7f}, @RTA_TTL_PROPAGATE={0x5, 0x1a, 0x5}, @RTA_VIA={0x14, 0x12, {0x1f, "9edfa5f6eb0f18afc99324027eb4"}}, @RTA_NEWDST={0x84, 0x13, [{0x7, 0x0, 0x1}, {0x7, 0x0, 0x1}, {0x400}, {0x8}, {0x9676}, {0xd1}, {0x2, 0x0, 0x1}, {0x8001}, {0x9, 0x0, 0x1}, {0x3}, {0x1000}, {0x6, 0x0, 0x1}, {0x48000}, {0x1}, {0x9}, {0x8}, {0x37}, {}, {0x7, 0x0, 0x1}, {0x8001, 0x0, 0x1}, {0x8}, {0x3}, {0x3}, {0x1a4, 0x0, 0x1}, {0x9}, {0x4}, {0xe53}, {0x9}, {0x80, 0x0, 0x1}, {0x2, 0x0, 0x1}, {0x1000, 0x0, 0x1}, {0x8, 0x0, 0x1}]}, @RTA_NEWDST={0x84, 0x13, [{0xe4a32}, {0x7}, {0x100, 0x0, 0x1}, {0x2879, 0x0, 0x1}, {0x1}, {0x1ff}, {0x1, 0x0, 0x1}, {0x4}, {0x200, 0x0, 0x1}, {0x34}, {0x1ff}, {0x7}, {0x0, 0x0, 0x1}, {0x9d, 0x0, 0x1}, {0x2}, {0xf99, 0x0, 0x1}, {0xfff, 0x0, 0x1}, {0x9}, {0x6, 0x0, 0x1}, {0x1, 0x0, 0x1}, {0x1}, {0x800}, {0x7}, {0x100}, {0x7}, {0x331b, 0x0, 0x1}, {0x1}, {0x1}, {0xf8001, 0x0, 0x1}, {0x3}, {0x7fff, 0x0, 0x1}, {0x3, 0x0, 0x1}]}, @RTA_OIF={0x8, 0x4, r3}]}, 0x150}, 0x1, 0x0, 0x0, 0x4004}, 0x50)

1.687406743s ago: executing program 3 (id=7996):
r0 = socket$netlink(0x10, 0x3, 0x0)
sendmsg$nl_route_sched(r0, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000a40)=@newtaction={0x94, 0x30, 0x1, 0x0, 0x0, {}, [{0x80, 0x1, [@m_mpls={0x4c, 0x1, 0x0, 0x0, {{0x9}, {0x20, 0x2, 0x0, 0x1, [@TCA_MPLS_PARMS={0x1c, 0x2, {{}, 0x4}}]}, {0x4}, {0xc}, {0xc}}}, @m_pedit={0x30, 0x2, 0x0, 0x0, {{0xa}, {0x4}, {0x4}, {0xc}, {0xc}}}]}]}, 0x94}}, 0x0)
r1 = openat$tun(0xffffffffffffff9c, &(0x7f0000000100), 0x0, 0x0)
ioctl$TUNSETIFF(r1, 0x400454ca, &(0x7f0000000040)={'syzkaller0\x00', 0x2})
ioctl$TUNSETLINK(r1, 0x400454cd, 0x304)
bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000001640)={0x11, 0x19, &(0x7f0000001740)=ANY=[@ANYBLOB="180800000600000000000000000000008510"], &(0x7f0000000000)='GPL\x00', 0xa, 0xde, &(0x7f0000000340)=""/222, 0x0, 0x1}, 0x94)
bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000340)={0x6, 0x18, &(0x7f0000001840)=ANY=[@ANYBLOB="180000009a010000000000000500000018110000d5903d0fe25ee49d69c127a073c160a2e47ba3c3e5dd5f4ef66aede2387e24f6a5867909d956a80475a81b48eb04a23fd18dec90db36f40eebdcd557a2323c2f6312963b330c7b2b762675577d309b6e97d5c60c2e7909bd1126fd0d8067883f546b874a3def588f8141dd1f7b18446fcef0f36c55ee16878fe632cb3ac4fab8b89cbc7caabe65831a1bedf5ee7f49416e9c2601b720b77b977da661a230b65c1782240b463b9e4aa74f783504234fd4da8e69fc24dcbfe03362320b4b1ab91d5cfa7b694fe192785f68592068", @ANYRES32, @ANYBLOB="0000000000000000b702000014000000b7030000000000008500000083000000bf090000000000005509010000000000950000000000000018110000", @ANYRES32, @ANYBLOB="0000000000000000b7080000090000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b7040000010000008500000082000000bf91000000000000b7020000010000008500000085000000b7000000000000009500000000000000"], &(0x7f0000000080)='GPL\x00', 0x8, 0x0, 0x0, 0x41100, 0x71, '\x00', 0x0, 0x25, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, &(0x7f0000000280)={0x2, 0x8, 0x472, 0x5}, 0x10, 0x0, 0x0, 0x1, &(0x7f0000000040)=[0x1, 0xffffffffffffffff], &(0x7f0000001700)=[{0x4, 0x3, 0x5, 0x3}], 0x10, 0xb}, 0xe4)
r2 = openat$tun(0xffffffffffffff9c, &(0x7f0000000380), 0x0, 0x0)
r3 = openat$tun(0xffffffffffffff9c, &(0x7f0000000080), 0x0, 0x0)
close(r3)
r4 = socket$kcm(0x2, 0x1, 0x0)
setsockopt$sock_timeval(r4, 0x1, 0x43, &(0x7f00000001c0)={0x0, 0xea60}, 0x10)
sendmsg$inet(r4, &(0x7f0000000fc0)={&(0x7f0000000000)={0x2, 0x4001, @remote}, 0x10, 0x0}, 0x20008811)
socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000000))
ioctl$SIOCSIFHWADDR(r3, 0x8922, &(0x7f0000002280)={'syzkaller0\x00', @random="2b0100004ec6"})
close(r2)
socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000a40))
ioctl$SIOCSIFHWADDR(r2, 0x8914, &(0x7f0000000140)={'syzkaller0\x00', @random="371692e7f7ef"})
r5 = socket$kcm(0x10, 0x400000002, 0x0)
write$cgroup_subtree(r5, &(0x7f0000000100)=ANY=[@ANYBLOB="0007000042009103"], 0xfe33)
ioctl$BTRFS_IOC_START_SYNC(r1, 0x80089418, &(0x7f00000002c0))
r6 = bpf$MAP_CREATE(0x0, &(0x7f0000000540)=ANY=[@ANYBLOB="0b000000070000000100010049000000010000004592e6c8a7984803fb6daa0559b2ae82e6e7d033af38cb3c0f7f515b19d3a53257bc6ef2fd1403b63360d576e622ee053c2909c5e45bae52671724116cfc000000000000000718b203973ec792fee99f726fcd00"/119, @ANYRES32, @ANYBLOB='\x00'/20, @ANYRES32=0x0, @ANYRES32, @ANYBLOB="000000000000000000000000000000000000000000000000000000004616e914d9a829a7afe4faa3220fdba32e232484b2f7e7036477357b3dba711632255e57203f33979a9f308112cc5ea60478"], 0x48)
bpf$MAP_GET_NEXT_KEY(0x2, &(0x7f0000000080)={r6, &(0x7f0000000080), &(0x7f0000000200)=""/166}, 0x20)
openat$tun(0xffffffffffffff9c, &(0x7f00000000c0), 0x10043, 0x0)
bpf$MAP_GET_NEXT_KEY(0x2, &(0x7f0000000180)={r6, &(0x7f00000006c0), &(0x7f00000003c0)=""/14, 0x2}, 0x20)
recvmsg(r5, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000001240)=[{&(0x7f00000027c0)=""/4102, 0x1006}, {&(0x7f0000005540)=""/4093, 0xffd}, {&(0x7f0000000440)=""/207, 0xcf}], 0x3}, 0x0)

1.49263879s ago: executing program 1 (id=7997):
r0 = socket$nl_route(0x10, 0x3, 0x0)
r1 = socket(0x10, 0x803, 0x0)
bind$netlink(r1, &(0x7f0000000100)={0x10, 0x0, 0x25dfdbfd, 0x400}, 0xc)
r2 = syz_init_net_socket$nl_rdma(0x10, 0x3, 0x10)
sendmsg$netlink(r2, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000002580)=[{&(0x7f0000000180)={0x14, 0x17, 0x1, 0x70bd28, 0x0, "", [@typed={0x4}]}, 0x14}], 0x1}, 0x0)
r3 = accept4$packet(r1, &(0x7f00000000c0)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @local}, &(0x7f00000001c0)=0x14, 0x0)
getsockname$packet(r3, &(0x7f0000000040)={0x11, 0x0, <r4=>0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000080)=0x14)
sendmsg$nl_route(r1, &(0x7f00000006c0)={0x0, 0x0, &(0x7f0000000280)={&(0x7f0000000340)=@newlink={0x44, 0x10, 0x40d, 0x70bd2f, 0x1ffffffe, {0x0, 0x0, 0x0, r4, 0x40046}, [@IFLA_LINKINFO={0x24, 0x12, 0x0, 0x1, @bond={{0x9}, {0x14, 0x2, 0x0, 0x1, [@IFLA_BOND_MODE={0x5, 0x1, 0x4}, @IFLA_BOND_XMIT_HASH_POLICY={0x5, 0xe, 0x3}]}}}]}, 0x44}, 0x1, 0x0, 0x0, 0x40040}, 0xc048044)
r5 = bpf$MAP_CREATE(0x0, &(0x7f0000000440)=ANY=[@ANYBLOB="0e000000040000000800000001"], 0x50)
bpf$MAP_CREATE(0x2000000000000000, &(0x7f0000000b00)=@base={0x6, 0x4, 0x70be, 0x5c, 0x0, 0xffffffffffffffff, 0x0, '\x00', 0x0, 0xffffffffffffffff, 0x0, 0x2}, 0x48)
r6 = bpf$PROG_LOAD(0x5, &(0x7f0000000340)={0x6, 0xd, &(0x7f0000000200)=ANY=[@ANYBLOB="1800000000000000000000000000000085000000bc00000018110000", @ANYRES32=r5, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bca2000000000000a6020000f8ffffffb7030000ffff0000b704000000000400850000003300000095"], &(0x7f0000000180)='GPL\x00', 0x2000000, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @xdp, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94)
bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f00000002c0)={r6, 0x5, 0xe, 0x0, &(0x7f0000000100)="4322750400f4ffffff003c000000", 0x0, 0xd11, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, 0x0, 0xb}, 0x50)
sendmsg$nl_route(r0, &(0x7f00000004c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000000)=@newlink={0x30, 0x10, 0x801, 0x0, 0x0, {0x0, 0x0, 0x0, 0x0, 0x0, 0x200e3}, [@IFLA_MASTER={0x8, 0xa, r4}, @IFLA_GROUP={0x8}]}, 0x30}}, 0x0)
setsockopt$IP6T_SO_SET_REPLACE(r1, 0x29, 0x40, &(0x7f0000000700)=@nat={'nat\x00', 0x1b, 0x5, 0x478, 0x450, 0x0, 0xffffffff, 0xf0, 0x340, 0x540, 0x540, 0xffffffff, 0x540, 0x540, 0x5, &(0x7f0000000140), {[{{@ipv6={@local, @private1={0xfc, 0x1, '\x00', 0x1}, [0xffffff00, 0xffffff, 0xffffff00, 0xffffffff], [0xffffffff, 0xff, 0xffffffff, 0xff000000], 'wlan0\x00', 'erspan0\x00', {}, {}, 0x2b, 0x7, 0x6, 0x4}, 0x0, 0xa8, 0xf0}, @unspec=@SNAT1={0x48, 'SNAT\x00', 0x1, {0x14, @ipv6=@private1, @ipv6=@remote, @gre_key=0x3, @port=0x4e20}}}, {{@uncond, 0x0, 0xa8, 0xf0}, @REDIRECT={0x48, 'REDIRECT\x00', 0x0, {0xa, @ipv6=@mcast2, @ipv6=@empty, @port=0x4e24, @port=0x4e20}}}, {{@uncond, 0x0, 0xa8, 0xd8}, @common=@inet=@SET2={0x30, 'SET\x00', 0x2, {{0x3, 0x1}, {0x2, 0x3, 0x6}, 0x0, 0x2}}}, {{@ipv6={@local, @private2, [0xff, 0xff000000, 0xffffffff, 0xff], [0x0, 0xffffffff, 0x0, 0xffffffff], 'ip6_vti0\x00', 'hsr0\x00', {}, {}, 0x73, 0xb7, 0x0, 0x4}, 0x0, 0xa8, 0xf0}, @REDIRECT={0x48, 'REDIRECT\x00', 0x0, {0x4, @ipv4=@multicast2, @ipv6=@dev={0xfe, 0x80, '\x00', 0x1a}, @icmp_id=0x67, @icmp_id=0x65}}}], {{'\x00', 0x0, 0xa8, 0xd0}, {0x28}}}}, 0x4d8)

1.487558628s ago: executing program 6 (id=7998):
bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000200)={0xd, 0x4, &(0x7f0000000000)=@framed={{}, [@ldst={0x1, 0x0, 0x3, 0x2, 0x1, 0x74}]}, 0x0, 0x4}, 0x94)
r0 = socket$nl_generic(0x10, 0x3, 0x10)
ioctl$sock_SIOCGIFINDEX_80211(r0, 0x8b18, &(0x7f0000000000)={'wlan0\x00'}) (async)
pipe(&(0x7f0000000040)={<r1=>0xffffffffffffffff})
bpf$PROG_LOAD(0x5, &(0x7f0000000440)={0x1a, 0x6, &(0x7f0000000700)=ANY=[@ANYBLOB="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"], &(0x7f0000000000)='syzkaller\x00', 0x9, 0xc3, &(0x7f000000cf3d)=""/195, 0x0, 0x0, '\x00', 0x0, @fallback=0x12, r1, 0x6, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x10, 0x1}, 0x94)

1.417546683s ago: executing program 6 (id=7999):
sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000000)={0x0}}, 0x0)
r0 = socket$netlink(0x10, 0x3, 0x0)
ioctl$ifreq_SIOCGIFINDEX_team(0xffffffffffffffff, 0x8933, &(0x7f00000002c0))
sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000280)=ANY=[@ANYBLOB="4400000010000104a5270b7357000000925e4a44", @ANYRES32, @ANYBLOB="0dfa130016000000240012000c00010000000000000000000c0002f60800000001180000080001"], 0x44}}, 0x0)
ioctl$F2FS_IOC_MOVE_RANGE(0xffffffffffffffff, 0xc020f509, &(0x7f0000000280)={r0, 0x7, 0x0, 0xfffffffe})
sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000280)=ANY=[@ANYBLOB='H'], 0x48}, 0x1, 0x0, 0x0, 0x20004810}, 0x0)
sendmmsg(r0, &(0x7f00000002c0), 0x40000000000009f, 0x0)

1.166675999s ago: executing program 3 (id=8000):
bpf$BPF_PROG_WITH_BTFID_LOAD(0x5, &(0x7f0000000300)=@bpf_lsm={0xd, 0x5, &(0x7f0000000040)=@framed={{0x65, 0xa, 0x0, 0x0, 0x0, 0x61, 0x11, 0x44}, [@initr0]}, &(0x7f0000000000)='GPL\x00'}, 0x80)
bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000200)={0x0, 0xffffffffffffffff, 0x0, 0xd}, 0x18)
sendmsg$IPCTNL_MSG_CT_NEW(0xffffffffffffffff, 0x0, 0x0)
r0 = socket$nl_generic(0x10, 0x3, 0x10)
ioctl$sock_SIOCGIFINDEX(r0, 0x8933, &(0x7f00000000c0)={'ipvlan1\x00', <r1=>0x0})
r2 = gettid()
r3 = socket(0x10, 0x803, 0x0)
syz_init_net_socket$bt_hci(0x1f, 0x3, 0x5)
sendmsg$nl_route(r3, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000180)=ANY=[@ANYBLOB="3c00000010000304f9fffffffedbdf2500007400", @ANYRES32=r1, @ANYBLOB="049c01000750050008001300", @ANYRES32=r2, @ANYBLOB="1400030076"], 0x3c}, 0x1, 0x0, 0x0, 0x4802}, 0x0)

1.044491742s ago: executing program 0 (id=8001):
r0 = socket$nl_netfilter(0x10, 0x3, 0xc)
r1 = socket$netlink(0x10, 0x3, 0x0)
bind$netlink(r1, &(0x7f0000514ff4)={0x10, 0x0, 0x0, 0x2ffffffff}, 0xc)
r2 = openat$tun(0xffffffffffffff9c, &(0x7f0000000240), 0x0, 0x0)
ioctl$TUNSETIFF(r2, 0x400454ca, &(0x7f0000000040)={'syzkaller0\x00', 0x7101})
r3 = socket(0x8, 0x3, 0x0)
r4 = socket$packet(0x11, 0x3, 0x300)
r5 = socket$inet6_icmp_raw(0xa, 0x3, 0x3a)
splice(r5, 0xfffffffffffffffc, r4, 0x0, 0x20, 0x0)
r6 = socket$unix(0x1, 0x1, 0x0)
ioctl$sock_SIOCGIFINDEX(r6, 0x8933, &(0x7f0000000100)={'syzkaller0\x00', <r7=>0x0})
r8 = socket$nl_generic(0x10, 0x3, 0x10)
sendmsg$nl_generic(r8, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000003840)=ANY=[@ANYBLOB="4400000040000701feffffff00000000017c00000400d7002800018006000600800a000008001100", @ANYRES32=0x0, @ANYBLOB="14001900fe800000000000000000000000000019040002"], 0x44}, 0x1, 0x0, 0x0, 0x48815}, 0xc000)
sendmsg$nl_route_sched(r3, &(0x7f00000012c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000180)=@newqdisc={0x44, 0x24, 0x4ee4e6a52ff56541, 0x70bd29, 0xffffffff, {0x0, 0x0, 0x0, r7, {0x0, 0xfff1}, {0xe, 0xffff}, {0xc, 0xf}}, [@qdisc_kind_options=@q_hfsc={{0x9}, {0x14, 0x2, @TCA_HFSC_RSC={0x10, 0x1, {0x0, 0xfffffffe, 0x4}}}}]}, 0x44}, 0x1, 0x0, 0x0, 0x8001}, 0x20008850)
r9 = socket$netlink(0x10, 0x3, 0x0)
sendmmsg$inet(0xffffffffffffffff, &(0x7f00000017c0)=[{{0x0, 0x0, 0x0, 0x0, &(0x7f0000000000)=[@ip_pktinfo={{0x1c, 0x0, 0x8, {0x0, @local, @multicast1}}}], 0x20}}], 0x1, 0x9880)
r10 = socket$inet(0x2, 0x2, 0x0)
setsockopt$inet_mreqn(r10, 0x0, 0x23, &(0x7f0000000740)={@multicast2, @loopback}, 0xc)
r11 = socket$netlink(0x10, 0x3, 0x0)
writev(r11, &(0x7f00000003c0)=[{&(0x7f0000000180)="390000001300034700bb65e1c3e4ffff01000000010000005600000025000000190004000400000007fd17e5ffff0800040000000000000000", 0x39}], 0x1)
writev(r11, &(0x7f0000000300)=[{&(0x7f00000001c0)="390000001300034700bb5be1c3e4feff06000000010000004500000025000000190004000400ad000d00000000000006040000000000f93132", 0x39}], 0x1)
r12 = socket$inet(0x2, 0x2, 0x0)
setsockopt$inet_mreqn(r12, 0x0, 0x23, &(0x7f0000000080)={@multicast2, @loopback}, 0xc)
setsockopt$inet_msfilter(r12, 0x0, 0x29, &(0x7f0000000000)=ANY=[@ANYBLOB="e00000027fa80a0101"], 0x57)
setsockopt$inet_mreqsrc(r10, 0x0, 0x24, &(0x7f0000000440)={@multicast2, @loopback, @empty}, 0xc)
setsockopt$inet_MCAST_JOIN_GROUP(r10, 0x0, 0x2a, &(0x7f00000008c0)={0x1, {{0x2, 0x0, @multicast2}}}, 0x88)
r13 = socket$unix(0x1, 0x1, 0x0)
ioctl$sock_SIOCGIFINDEX(r13, 0x8933, &(0x7f0000000100)={'syzkaller0\x00', <r14=>0x0})
sendmsg$nl_route_sched(r9, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000540)={&(0x7f0000000300)=@newqdisc={0x48, 0x28, 0x4ee4e6a52ff56541, 0x4001, 0xfffffdfc, {0x0, 0x0, 0x0, r14, {}, {0xffff, 0xffff}, {0x2, 0x1}}, [@qdisc_kind_options=@q_cbq={{0x8}, {0x1c, 0x2, [@TCA_CBS_PARMS={0x18, 0x1, {0x7, '\x00', 0x3069, 0x0, 0x1, 0xfffffc01}}]}}]}, 0x48}, 0x1, 0x0, 0x0, 0x400dc}, 0x24000080)
sendmsg$IPSET_CMD_CREATE(r0, &(0x7f0000000100)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000040)=ANY=[@ANYBLOB="28000000020605000000000000000000000000000500010007000000090009000000000000000000ba789b25749f4dba4bef362a3f6d4b22809db19b1b0559f00cba3aad8eda5e64be0f9de2d81cbce8aee9643e4b3c5821078d8172553b27625f1fa0fe5cda1e76c1ead4e8a1c0a99418853fc1df64234ba2ccc5e2ce79"], 0x28}}, 0x0)

548.540663ms ago: executing program 1 (id=8002):
r0 = socket$nl_netfilter(0x10, 0x3, 0xc)
sendmsg$NFT_BATCH(r0, &(0x7f000000c2c0)={0x0, 0x0, &(0x7f0000000200)={&(0x7f00000008c0)=ANY=[@ANYBLOB="140000001000010000000000000000000000000a28000000000a0101000000005e1affd5020000000900010073797a300000000008000240000000032c000000030a01030000e6ff00000000020000000900010073797a30000000000900030073797a320000000014000000110001"], 0x7c}}, 0x0) (async)
sendmsg$NFT_BATCH(r0, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000300)={{0x14}, [@NFT_MSG_NEWRULE={0x84, 0x6, 0xa, 0x40b, 0x0, 0x0, {0x2}, [@NFTA_RULE_EXPRESSIONS={0x58, 0x4, 0x0, 0x1, [{0x24, 0x1, 0x0, 0x1, @socket={{0xb}, @val={0x14, 0x2, 0x0, 0x1, [@NFTA_SOCKET_DREG={0x8, 0x2, 0x1, 0x0, 0x3}, @NFTA_SOCKET_KEY={0x8, 0x1, 0x1, 0x0, 0x2}]}}}, {0x30, 0x1, 0x0, 0x1, @nat={{0x8}, @val={0x24, 0x2, 0x0, 0x1, [@NFTA_NAT_FAMILY={0x8, 0x2, 0x1, 0x0, 0x2}, @NFTA_NAT_TYPE={0x8, 0x1, 0x1, 0x0, 0x1}, @NFTA_NAT_REG_ADDR_MAX={0x8, 0x4, 0x1, 0x0, 0x16}, @NFTA_NAT_REG_ADDR_MIN={0x8, 0x3, 0x1, 0x0, 0x3}]}}}]}, @NFTA_RULE_TABLE={0x9, 0x1, 'syz0\x00'}, @NFTA_RULE_CHAIN={0x9, 0x2, 'syz2\x00'}]}], {0x14}}, 0xac}}, 0x0)
r1 = socket$inet_sctp(0x2, 0x5, 0x84) (async)
getsockopt$inet_sctp_SCTP_PEER_ADDR_PARAMS(0xffffffffffffffff, 0x84, 0x9, &(0x7f0000000080)={<r2=>0x0, @in={{0x2, 0x4e20, @broadcast}}, 0x6, 0x18, 0x7, 0x800, 0x8, 0x9, 0x3}, &(0x7f0000000140)=0x9c)
setsockopt$inet_sctp_SCTP_PEER_ADDR_THLDS(r1, 0x84, 0x1f, &(0x7f0000000180)={r2, @in={{0x2, 0x4e21, @multicast2}}, 0x4, 0x101}, 0x90) (async)
r3 = socket$inet6(0xa, 0x5, 0x0) (async)
r4 = socket$netlink(0x10, 0x3, 0x0)
sendmsg$nl_route_sched(r4, &(0x7f0000000100)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f00000001c0)=@deltaction={0x24, 0x32, 0x533, 0x0, 0x0, {}, [@TCA_ACT_TAB={0x10, 0x1, [{0xc, 0x1, 0x0, 0x0, @TCA_ACT_KIND={0x8, 0x1, 'ipt\x00'}}]}]}, 0x24}}, 0x0) (async)
setsockopt$sock_int(r3, 0x1, 0x2c, &(0x7f0000000040)=0x800, 0x4) (async)
setsockopt$inet_sctp_SCTP_AUTOCLOSE(r1, 0x84, 0x4, &(0x7f0000000240)=0x3, 0x4) (async)
setsockopt$SO_ATTACH_FILTER(r3, 0x1, 0x1b, &(0x7f0000000000)={0x0, 0x0}, 0x10)

488.181176ms ago: executing program 6 (id=8003):
r0 = socket$nl_netfilter(0x10, 0x3, 0xc)
r1 = socket$inet6_mptcp(0xa, 0x1, 0x106)
sendto$inet6(r1, &(0x7f0000000200)="c576131c4ec97724583e37f81248b40016d1e97897d44c30077302afb9fb78e035c8206e491d6117f397279635ebd03085e5832e533eedaa146decbeb254619892816abfc1ffec9a948cd808baf44fc538606bf7791a0d293474ef49608e49d169a47872e2508c2f890644b7a29544568b5c5f17199cdc47e8c7cd074f4d7c00fbf4ea476a0cd71051a9da8e89c05d8115832086ae3b6e387f3d0c773eb84f55d4f610ad55574833cb4c75f2d3aa132f4ce6dd1a27be367968fb305d8204dee500a0688f4406bf3239fd7133d6c0ae5f60cf29cbcbbbf521f59611f10d310307cf4e0e5def5ea1be04845a58c69f", 0xee, 0x559a3f152e9611d3, 0x0, 0x0)
sendmsg$NFT_BATCH(r0, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000100)=ANY=[@ANYBLOB="1400000010f7040000000000000000000000000a20000000000a05000000000000000000070000000900010073797a30000000004c000000090a01040000000000000000070000000900020073797a31000000000900010073797a3000000000080005400000001c08000a4000000000080003400000004008000f40000000063c0000000c0a01030000000000000000070000070900020073797a31000000000900010073797a3000000000100003800c0000800800034000000002140000001000010000000000000000000084000a"], 0xd0}}, 0x0)

351.045447ms ago: executing program 3 (id=8004):
r0 = socket$inet_udp(0x2, 0x2, 0x0)
bind$inet(r0, &(0x7f0000000000)={0x2, 0x0, @dev={0xac, 0x14, 0x14, 0x33}}, 0x10)
connect$inet(r0, &(0x7f0000000080)={0x2, 0x0, @multicast2}, 0x10)
sendmmsg(r0, &(0x7f0000007fc0), 0x800001d, 0x0)
setsockopt$IP_VS_SO_SET_ADD(r0, 0x0, 0x482, &(0x7f0000000040)={0x100000011, @private=0xa010100, 0xffff, 0x0, 'fo\x00', 0x0, 0xff, 0xf}, 0x2c)

323.269182ms ago: executing program 1 (id=8005):
r0 = socket$nl_generic(0x10, 0x3, 0x10) (async)
r1 = socket$inet6(0xa, 0x3, 0x5)
sendmmsg(r1, &(0x7f0000001500)=[{{&(0x7f0000000040)=@l2tp6={0xa, 0x0, 0x7080000, @loopback, 0x7, 0x1}, 0x80, 0x0, 0x0, &(0x7f0000000240)=[{0x18, 0x29, 0x37, "d86c"}], 0x18}}], 0x1, 0x0) (async)
r2 = socket$unix(0x1, 0x5, 0x0)
r3 = socket$nl_generic(0x10, 0x3, 0x10) (async)
r4 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000040), 0xffffffffffffffff)
ioctl$sock_SIOCGIFINDEX_80211(r2, 0x8933, &(0x7f0000000080)={'wlan0\x00', <r5=>0x0})
sendmsg$NL80211_CMD_SET_TX_BITRATE_MASK(r3, &(0x7f0000000100)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000640)=ANY=[@ANYBLOB='@\x00\x00\x00', @ANYRES16=r4, @ANYBLOB="010000000000000000003900000008000300", @ANYRES32=r5, @ANYBLOB="24005a8020000180140003000000200000000000edff"], 0x40}}, 0x0) (async, rerun: 32)
r6 = syz_genetlink_get_family_id$mptcp(&(0x7f0000005c40), 0xffffffffffffffff) (async, rerun: 32)
r7 = bpf$ITER_CREATE(0x21, &(0x7f0000000080), 0x2a)
ioctl$sock_kcm_SIOCKCMATTACH(r7, 0x89e0, &(0x7f0000000040)={r0}) (async)
sendmsg$MPTCP_PM_CMD_GET_ADDR(r0, &(0x7f0000000b00)={0x0, 0x0, &(0x7f0000000ac0)={&(0x7f00000007c0)=ANY=[@ANYBLOB="a4000000", @ANYRES16=r6, @ANYBLOB="010026bd7000fddbdf250300000008000400fffbffff3800018014000400fe880000000000000000000000000101080006"], 0xa4}, 0x1, 0x0, 0x0, 0x890}, 0x0)

288.885254ms ago: executing program 6 (id=8006):
ioctl$ifreq_SIOCGIFINDEX_vcan(0xffffffffffffffff, 0x8933, 0x0)
bind$can_raw(0xffffffffffffffff, &(0x7f00000001c0), 0x10)
r0 = socket(0x1d, 0x2, 0x6)
ioctl$ifreq_SIOCGIFINDEX_vcan(r0, 0x8933, &(0x7f0000000000)={'vcan0\x00', <r1=>0x0})
bind$can_j1939(r0, &(0x7f0000000040)={0x1d, r1, 0x8000000000000003, {0x0, 0xf0}}, 0x18)
r2 = socket(0x10, 0x3, 0x0)
write(r2, &(0x7f0000000000)="2400000011005f0414f9f4070009041f810000000e0000000000000008000f0001000000", 0x24)
r3 = socket$nl_generic(0x10, 0x3, 0x10)
r4 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000100), 0xffffffffffffffff)
r5 = socket$nl_generic(0x10, 0x3, 0x10)
r6 = socket$netlink(0x10, 0x3, 0x0)
sendmsg$nl_route(r6, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000040)={&(0x7f00000003c0)=@newlink={0x50, 0x10, 0xffffff1f, 0x0, 0x1, {0x0, 0x0, 0x0, 0x0, 0x0, 0x4408}, [@IFLA_LINKINFO={0x30, 0x12, 0x0, 0x1, @geneve={{0xb}, {0x20, 0x2, 0x0, 0x1, [@IFLA_GENEVE_TTL_INHERIT={0x5, 0xc, 0x1}, @IFLA_GENEVE_REMOTE6={0x14, 0x7, @loopback}]}}}]}, 0x50}, 0x1, 0x0, 0x0, 0x40000}, 0x80)
sendmsg$RDMA_NLDEV_CMD_DELLINK(r6, &(0x7f0000000340)={&(0x7f0000000280)={0x10, 0x0, 0x0, 0x6}, 0xc, &(0x7f0000000300)={&(0x7f00000002c0)={0x18, 0x1404, 0x0, 0x70bd28, 0x25dfdbfe, "", [@RDMA_NLDEV_ATTR_DEV_INDEX={0x8}]}, 0x18}, 0x1, 0x0, 0x0, 0x81}, 0x68d0)
ioctl$sock_SIOCGIFINDEX_80211(r5, 0x8933, &(0x7f0000000200)={'wlan1\x00', <r7=>0x0})
sendmsg$NL80211_CMD_GET_POWER_SAVE(r3, &(0x7f0000000240)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f0000000540)=ANY=[@ANYBLOB="1c000000", @ANYRES16=r4, @ANYBLOB="01002cbd7000ffdbdf253e00000008000300", @ANYRES32=r7], 0x1c}, 0x1, 0x0, 0x0, 0x1}, 0x90)
ioctl$sock_SIOCGIFINDEX_80211(0xffffffffffffffff, 0x8933, &(0x7f00000000c0)={'wlan0\x00'})
sendmsg$NL80211_CMD_NEW_KEY(r2, &(0x7f0000000180)={&(0x7f0000000080)={0x10, 0x0, 0x0, 0x40000000}, 0xc, &(0x7f0000000140)={&(0x7f0000000480)={0x38, r4, 0x800, 0x70bd28, 0x25dfdbff, {{}, {@void, @void}}, [@NL80211_ATTR_KEY_DATA_WEP40={0x9, 0x7, "5ab642c9ab"}, @NL80211_ATTR_KEY_DEFAULT_MGMT={0x4}, @NL80211_ATTR_KEY_DATA_WEP104={0x11, 0x7, "0f2584fa83584a6fcbfef7613d"}]}, 0x38}, 0x1, 0x0, 0x0, 0x4048840}, 0x44801)

900.842µs ago: executing program 1 (id=8007):
r0 = socket$nl_generic(0x10, 0x3, 0x10)
bpf$BPF_TASK_FD_QUERY(0x14, &(0x7f0000000180)={0x0, 0xffffffffffffffff, 0x0, 0x7, &(0x7f0000000000)='cgroup\x00'}, 0x30)
r1 = openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000), 0x200002, 0x0)
r2 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000100)={0x18, 0x4, &(0x7f0000000400)=ANY=[@ANYBLOB="dc010000100000001800000000000000000000000000000095"], &(0x7f00000003c0)='syzkaller\x00', 0x5, 0x0, 0x0, 0x0, 0x4}, 0x94)
r3 = openat$cgroup_procs(r1, &(0x7f0000000480)='cgroup.procs\x00', 0x2, 0x0)
r4 = openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000), 0x200002, 0x0)
r5 = openat$cgroup(r4, &(0x7f0000000040)='syz1\x00', 0x200002, 0x0)
r6 = openat$cgroup_procs(r5, &(0x7f0000000080)='cgroup.threads\x00', 0x2, 0x0)
write$cgroup_pid(r6, &(0x7f0000000c40), 0x12)
sendfile(r2, r3, 0x0, 0x3ffffffffffffa)
sendmsg$nl_generic(r0, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000180)={&(0x7f00000001c0)=ANY=[@ANYBLOB="340000003e000701feffffff00000000047c0000040042800c0001"], 0x34}, 0x1, 0x0, 0x0, 0x4000895}, 0xc000)
bpf$PROG_LOAD(0x5, &(0x7f0000000100)={0x3, 0x3, &(0x7f0000000040)=@framed, &(0x7f0000000000)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x26, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94)

0s ago: executing program 0 (id=8008):
r0 = socket$inet_icmp_raw(0x2, 0x3, 0x1)
sendto$inet(r0, &(0x7f0000000000)="7cde2b983b851da7ec9c79db829cb3d342432c6d49fe80a30fda8c771160420cb78518ce4052c09dfe6626a0061dbb9f596621dfee514937e306645559877b4f51fa9be800fd4fd367ee701eec33f7941c7308a742d1dba86655722cb82461598f4302102d3c2e24325fd9ee01fdb74aa47d5aec13ca4c7b2a30be939a44a0ed76ad4e00"/142, 0x8e, 0x4000010, &(0x7f0000000180)={0x2, 0x4e24, @loopback}, 0x10)

kernel console output (not intermixed with test programs):

fect channel medium
[  555.489311][T28377] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium
[  555.511879][T28384] delete_channel: no stack
[  555.518686][T28384] netlink: 8 bytes leftover after parsing attributes in process `syz.3.6248'.
[  555.564968][T28380] mac80211_hwsim hwsim58 wlan0: entered promiscuous mode
[  555.656929][T28390] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium
[  555.703762][T28377] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium
[  555.725328][T28377] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium
[  555.737791][T28377] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium
[  555.766893][T28377] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium
[  556.071701][T28420] netlink: 'syz.3.6254': attribute type 1 has an invalid length.
[  556.513751][T28449] netlink: 4 bytes leftover after parsing attributes in process `syz.0.6265'.
[  556.558908][T28447] bond1: option arp_interval: mode dependency failed, not supported in mode 802.3ad(4)
[  556.571559][T28447] bond1 (unregistering): Released all slaves
[  556.733149][T28459] bridge0: port 1(bridge_slave_0) entered disabled state
[  556.749353][T28463] netlink: 'syz.0.6267': attribute type 16 has an invalid length.
[  556.759220][T28459] bridge0: port 2(bridge_slave_1) entered disabled state
[  556.768697][T28463] netlink: 'syz.0.6267': attribute type 17 has an invalid length.
[  556.856599][T28463] A link change request failed with some changes committed already. Interface caif0 may have been left with an inconsistent configuration, please check.
[  557.100669][ T8513] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog
[  557.154851][T28488] netlink: 'syz.0.6274': attribute type 3 has an invalid length.
[  557.284570][T28497] wlan0 speed is unknown, defaulting to 1000
[  557.313750][T28497] lo speed is unknown, defaulting to 1000
[  557.329800][T28506] __nla_validate_parse: 2 callbacks suppressed
[  557.329819][T28506] netlink: 212368 bytes leftover after parsing attributes in process `syz.5.6278'.
[  557.503049][T28517] netlink: 'syz.4.6285': attribute type 2 has an invalid length.
[  557.584672][T28522] netlink: 24 bytes leftover after parsing attributes in process `syz.0.6287'.
[  557.909342][T28538] netlink: 12 bytes leftover after parsing attributes in process `syz.5.6292'.
[  557.956852][T28538] netlink: 16 bytes leftover after parsing attributes in process `syz.5.6292'.
[  558.113919][T28541] netlink: 7 bytes leftover after parsing attributes in process `syz.0.6293'.
[  558.155329][T28546] netlink: 20 bytes leftover after parsing attributes in process `syz.4.6295'.
[  558.175311][T28546] netlink: 20 bytes leftover after parsing attributes in process `syz.4.6295'.
[  558.177611][T28541] netlink: 12 bytes leftover after parsing attributes in process `syz.0.6293'.
[  558.219539][T28541] netlink: 56 bytes leftover after parsing attributes in process `syz.0.6293'.
[  558.270409][T28541] netlink: 8 bytes leftover after parsing attributes in process `syz.0.6293'.
[  558.288531][ T5839] Bluetooth: hci0: unexpected cc 0x0c03 length: 249 > 1
[  558.301942][ T5839] Bluetooth: hci0: unexpected cc 0x1003 length: 249 > 9
[  558.315554][ T5839] Bluetooth: hci0: unexpected cc 0x1001 length: 249 > 9
[  558.329186][ T5839] Bluetooth: hci0: unexpected cc 0x0c23 length: 249 > 4
[  558.338577][ T5839] Bluetooth: hci0: unexpected cc 0x0c38 length: 249 > 2
[  558.511609][T28570] net_ratelimit: 1 callbacks suppressed
[  558.511627][T28570] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog
[  558.693038][T28577] workqueue: Failed to create a rescuer kthread for wq "nfc3_nci_cmd_wq": -EINTR
[  558.829455][T28553] wlan0 speed is unknown, defaulting to 1000
[  558.946960][T28553] lo speed is unknown, defaulting to 1000
[  559.138161][T28596] Cannot find add_set index 65532 as target
[  559.924577][T28637] 8021q: adding VLAN 0 to HW filter on device bond1
[  560.456044][ T5839] Bluetooth: hci0: command tx timeout
[  561.614270][T28634] 8021q: adding VLAN 0 to HW filter on device bond1
[  561.621660][T28634] bond1: (slave vxcan3): The slave device specified does not support setting the MAC address
[  561.633706][T28634] bond1: (slave vxcan3): Error -95 calling set_mac_address
[  561.864640][T28553] chnl_net:caif_netlink_parms(): no params data found
[  562.039710][T28553] bridge0: port 1(bridge_slave_0) entered blocking state
[  562.047912][T28553] bridge0: port 1(bridge_slave_0) entered disabled state
[  562.055419][T28553] bridge_slave_0: entered allmulticast mode
[  562.063407][T28553] bridge_slave_0: entered promiscuous mode
[  562.072819][T28553] bridge0: port 2(bridge_slave_1) entered blocking state
[  562.080898][T28553] bridge0: port 2(bridge_slave_1) entered disabled state
[  562.088319][T28553] bridge_slave_1: entered allmulticast mode
[  562.096242][T28553] bridge_slave_1: entered promiscuous mode
[  562.169917][T28553] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link
[  562.244470][T28553] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link
[  562.414268][T28553] team0: Port device team_slave_0 added
[  562.426399][T28686] __nla_validate_parse: 10 callbacks suppressed
[  562.426420][T28686] netlink: 60 bytes leftover after parsing attributes in process `syz.3.6328'.
[  562.434447][T28553] team0: Port device team_slave_1 added
[  562.501060][T28683] netlink: 48 bytes leftover after parsing attributes in process `syz.0.6329'.
[  562.539956][ T5839] Bluetooth: hci0: command tx timeout
[  562.632855][T28692] Bluetooth: MGMT ver 1.23
[  562.752490][T28698] validate_nla: 1 callbacks suppressed
[  562.752508][T28698] netlink: 'syz.4.6331': attribute type 1 has an invalid length.
[  562.767062][T28686] wlan0 speed is unknown, defaulting to 1000
[  562.767648][T28698] netlink: 228 bytes leftover after parsing attributes in process `syz.4.6331'.
[  562.794492][T28553] batman_adv: batadv0: Adding interface: batadv_slave_0
[  562.804367][T28553] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem.
[  562.833340][T28553] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active
[  562.851618][T28553] batman_adv: batadv0: Adding interface: batadv_slave_1
[  562.859257][    C1] ip6_tunnel: ip6gretap0 xmit: Local address not yet configured!
[  562.877592][ T1301] clip:clip_start_xmit: skb_dst(skb) == NULL
[  562.887558][T28553] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem.
[  562.916366][T28553] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active
[  562.929430][T28686] lo speed is unknown, defaulting to 1000
[  563.062966][T28553] hsr_slave_0: entered promiscuous mode
[  563.076463][T28553] hsr_slave_1: entered promiscuous mode
[  563.101107][T28553] debugfs: 'hsr0' already exists in 'hsr'
[  563.106925][T28553] Cannot create hsr debugfs directory
[  563.129231][T28717] gre1: entered promiscuous mode
[  563.134454][T28717] gre1: entered allmulticast mode
[  563.144625][T28712] netlink: 11562 bytes leftover after parsing attributes in process `syz.5.6335'.
[  563.318951][T28720] netlink: 60 bytes leftover after parsing attributes in process `syz.0.6338'.
[  563.446571][T28735] netlink: 808 bytes leftover after parsing attributes in process `syz.0.6342'.
[  563.467750][T28735] netlink: 212408 bytes leftover after parsing attributes in process `syz.0.6342'.
[  563.538420][T28737] netlink: 80 bytes leftover after parsing attributes in process `syz.0.6343'.
[  563.720776][T28553] netdevsim netdevsim1 netdevsim3 (unregistering): unset [0, 0] type 1 family 0 port 8472 - 0
[  563.746221][T28553] netdevsim netdevsim1 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[  563.776737][T28553] netdevsim netdevsim1 netdevsim3 (unregistering): unset [1, 1] type 2 family 0 port 20004 - 0
[  564.024659][T28553] netdevsim netdevsim1 netdevsim2 (unregistering): unset [0, 0] type 1 family 0 port 8472 - 0
[  564.053133][T28553] netdevsim netdevsim1 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[  564.069045][T28553] netdevsim netdevsim1 netdevsim2 (unregistering): unset [1, 1] type 2 family 0 port 20004 - 0
[  564.088235][T28759] netlink: 8 bytes leftover after parsing attributes in process `syz.5.6351'.
[  564.197571][T28553] netdevsim netdevsim1 netdevsim1 (unregistering): unset [0, 0] type 1 family 0 port 8472 - 0
[  564.208800][T28553] netdevsim netdevsim1 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[  564.225287][T28553] netdevsim netdevsim1 netdevsim1 (unregistering): unset [1, 1] type 2 family 0 port 20004 - 0
[  564.340609][T28553] netdevsim netdevsim1 netdevsim0 (unregistering): unset [0, 0] type 1 family 0 port 8472 - 0
[  564.344847][T28772] netlink: 12 bytes leftover after parsing attributes in process `syz.3.6356'.
[  564.352547][T28553] netdevsim netdevsim1 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[  564.376113][T28553] netdevsim netdevsim1 netdevsim0 (unregistering): unset [1, 1] type 2 family 0 port 20004 - 0
[  564.392116][T28772] netlink: 'syz.3.6356': attribute type 1 has an invalid length.
[  564.406744][T28772] netlink: 'syz.3.6356': attribute type 1 has an invalid length.
[  564.422409][T28772] netlink: 'syz.3.6356': attribute type 2 has an invalid length.
[  564.432665][T28777] IPVS: sync thread started: state = BACKUP, mcast_ifn = wg1, syncid = 1, id = 0
[  564.445644][T28772] netlink: 'syz.3.6356': attribute type 1 has an invalid length.
[  564.578044][T28779] 8021q: VLANs not supported on tunl0
[  564.606212][T28788] netlink: 'syz.5.6362': attribute type 21 has an invalid length.
[  564.629737][ T5839] Bluetooth: hci0: command tx timeout
[  564.687157][T28553] netdevsim netdevsim1 netdevsim0: renamed from eth0
[  564.719030][T28553] netdevsim netdevsim1 netdevsim1: renamed from eth1
[  564.728470][T28795] netlink: 'syz.0.6363': attribute type 1 has an invalid length.
[  564.748011][T28553] netdevsim netdevsim1 netdevsim2: renamed from eth2
[  564.761592][T28553] netdevsim netdevsim1 netdevsim3: renamed from eth3
[  565.058405][T28553] 8021q: adding VLAN 0 to HW filter on device bond0
[  565.102870][T28553] 8021q: adding VLAN 0 to HW filter on device team0
[  565.124324][T14377] bridge0: port 1(bridge_slave_0) entered blocking state
[  565.131566][T14377] bridge0: port 1(bridge_slave_0) entered forwarding state
[  565.153119][T28833] netlink: 'syz.5.6371': attribute type 21 has an invalid length.
[  565.181088][T14377] bridge0: port 2(bridge_slave_1) entered blocking state
[  565.188290][T14377] bridge0: port 2(bridge_slave_1) entered forwarding state
[  565.207105][T28833] netlink: 'syz.5.6371': attribute type 22 has an invalid length.
[  565.214952][T28833] netlink: 'syz.5.6371': attribute type 23 has an invalid length.
[  565.273863][T28837] Bluetooth: MGMT ver 1.23
[  565.381109][T28843] bridge0: port 2(bridge_slave_1) entered disabled state
[  565.389786][T28843] bridge0: port 1(bridge_slave_0) entered disabled state
[  565.469723][T28852] delete_channel: no stack
[  565.663412][T28864] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium
[  565.715835][T28870] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium
[  565.717220][T28553] 8021q: adding VLAN 0 to HW filter on device batadv0
[  565.771742][T28864] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium
[  565.830961][T28870] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium
[  565.834565][T28553] veth0_vlan: entered promiscuous mode
[  565.876718][T28553] veth1_vlan: entered promiscuous mode
[  565.895645][T28864] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium
[  565.926977][T28875] openvswitch: netlink: IP tunnel dst address not specified
[  565.944246][T28864] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium
[  565.949505][T28553] veth0_macvtap: entered promiscuous mode
[  565.963333][T28864] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium
[  565.976800][T28864] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium
[  565.988958][T28877] team0: entered promiscuous mode
[  565.994026][T28877] team_slave_0: entered promiscuous mode
[  566.000296][T28877] team_slave_1: entered promiscuous mode
[  566.009605][T28864] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium
[  566.020025][T28877] dummy0: entered promiscuous mode
[  566.029160][T28877] 8021q: adding VLAN 0 to HW filter on device team0
[  566.037564][T28864] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium
[  566.060888][T28553] veth1_macvtap: entered promiscuous mode
[  566.072436][T28864] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium
[  566.099154][T28864] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium
[  566.154412][T28864] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium
[  566.168393][T28864] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium
[  566.180293][T28882] ip6gre1: entered promiscuous mode
[  566.186485][T28882] ip6gre1: entered allmulticast mode
[  566.187613][T28864] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium
[  566.206162][T28886] A link change request failed with some changes committed already. Interface lo may have been left with an inconsistent configuration, please check.
[  566.227253][T28864] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium
[  566.239543][T28864] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium
[  566.289904][T28553] batman_adv: batadv0: Interface activated: batadv_slave_0
[  566.302555][T28870] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium
[  566.337638][T28864] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium
[  566.349730][T28864] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium
[  566.353194][T28553] batman_adv: batadv0: Interface activated: batadv_slave_1
[  566.371454][T28864] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium
[  566.423279][T14368] netdevsim netdevsim1 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0
[  566.443419][T14368] netdevsim netdevsim1 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0
[  566.481627][T14368] netdevsim netdevsim1 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0
[  566.493421][T14368] netdevsim netdevsim1 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0
[  566.679534][T14377] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50
[  566.698873][ T5839] Bluetooth: hci0: command tx timeout
[  566.707116][T14377] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50
[  566.832979][T14377] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50
[  566.846357][T14377] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50
[  567.051093][T28931] netdevsim netdevsim3 ������: renamed from netdevsim0 (while UP)
[  567.157776][T28937] RDS: rds_bind could not find a transport for ::ffff:172.30.0.5, load rds_tcp or rds_rdma?
[  567.395983][T28956] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium
[  567.410127][T28956] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium
[  567.436407][T28950] __nla_validate_parse: 17 callbacks suppressed
[  567.436423][T28950] netlink: 14 bytes leftover after parsing attributes in process `syz.0.6412'.
[  567.499409][T28955] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium
[  567.650422][T28968] tipc: Started in network mode
[  567.655570][T28968] tipc: Node identity 00000000000000000000000000000001, cluster identity 4711
[  567.664739][T28968] tipc: New replicast peer: fc00:0000:0000:0000:0000:0000:0000:0000
[  567.674313][T28968] tipc: Enabled bearer <udp:syz2>, priority 10
[  567.714349][T28972] netlink: 40 bytes leftover after parsing attributes in process `syz.3.6420'.
[  567.725832][T28969] netlink: 32 bytes leftover after parsing attributes in process `syz.1.6418'.
[  567.755992][T28974] netlink: 40 bytes leftover after parsing attributes in process `syz.3.6420'.
[  567.762780][T28968] netlink: 32 bytes leftover after parsing attributes in process `syz.1.6418'.
[  567.814910][T28978] validate_nla: 5 callbacks suppressed
[  567.814928][T28978] netlink: 'syz.4.6422': attribute type 13 has an invalid length.
[  567.928513][T28978] netlink: 'syz.4.6422': attribute type 13 has an invalid length.
[  568.126390][T28997] netlink: 'syz.0.6426': attribute type 11 has an invalid length.
[  568.149738][T28997] netlink: 4 bytes leftover after parsing attributes in process `syz.0.6426'.
[  568.172400][ T3741] netdevsim netdevsim0 netdevsim0: set [0, 0] type 1 family 0 port 8472 - 0
[  568.197476][ T3741] netdevsim netdevsim0 netdevsim1: set [0, 0] type 1 family 0 port 8472 - 0
[  568.218004][T29002] syzkaller0: entered promiscuous mode
[  568.253738][T29002] syzkaller0: entered allmulticast mode
[  568.263302][ T3741] netdevsim netdevsim0 netdevsim2: set [0, 0] type 1 family 0 port 8472 - 0
[  568.272353][ T3741] netdevsim netdevsim0 netdevsim3: set [0, 0] type 1 family 0 port 8472 - 0
[  568.288366][T29017] netlink: 'syz.1.6432': attribute type 8 has an invalid length.
[  568.291134][T29007] netlink: 200 bytes leftover after parsing attributes in process `syz.0.6426'.
[  568.317130][T29007] netlink: 4 bytes leftover after parsing attributes in process `syz.0.6426'.
[  568.562030][T29028] netlink: 4 bytes leftover after parsing attributes in process `syz.1.6435'.
[  568.571951][T29028] netlink: 4 bytes leftover after parsing attributes in process `syz.1.6435'.
[  568.785521][T15806] tipc: Node number set to 1
[  568.929876][T29021] nbd: must specify at least one socket
[  569.069228][T29040] Freezing with imperfect legacy cgroup freezer. See cgroup.freeze of cgroup v2
[  569.083597][T29040] netlink: 'syz.4.6438': attribute type 12 has an invalid length.
[  569.139261][T29040] bond1: option primary_reselect: invalid value (255)
[  569.159623][T29040] bond1 (unregistering): Released all slaves
[  569.201182][T29045] x_tables: ip_tables: icmp match: only valid for protocol 1
[  570.123557][T29111] netdevsim netdevsim0 netdevsim3 (unregistering): unset [0, 0] type 1 family 0 port 8472 - 0
[  570.139130][T29111] netdevsim netdevsim0 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[  570.187617][ T8513] IPVS: starting estimator thread 0...
[  570.286814][T29122] IPVS: using max 33 ests per chain, 79200 per kthread
[  570.298304][T29111] netdevsim netdevsim0 netdevsim2 (unregistering): unset [0, 0] type 1 family 0 port 8472 - 0
[  570.308984][T29111] netdevsim netdevsim0 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[  570.427891][T29111] netdevsim netdevsim0 netdevsim1 (unregistering): unset [0, 0] type 1 family 0 port 8472 - 0
[  570.438804][T29111] netdevsim netdevsim0 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[  570.525764][T29132] syzkaller0: entered promiscuous mode
[  570.545337][T29132] syzkaller0: entered allmulticast mode
[  570.574896][T29132] netlink: 'syz.4.6472': attribute type 4 has an invalid length.
[  570.678787][T29111] netdevsim netdevsim0 netdevsim0 (unregistering): unset [0, 0] type 1 family 0 port 8472 - 0
[  570.715388][T29111] netdevsim netdevsim0 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[  570.864961][T29156] syzkaller0: entered promiscuous mode
[  570.871448][T29156] syzkaller0: entered allmulticast mode
[  570.949850][T14368] netdevsim netdevsim0 eth0: set [0, 0] type 1 family 0 port 8472 - 0
[  570.966280][T14368] netdevsim netdevsim0 eth0: set [1, 0] type 2 family 0 port 6081 - 0
[  570.975419][T29165] netlink: 'syz.5.6478': attribute type 83 has an invalid length.
[  571.017886][T14368] netdevsim netdevsim0 eth1: set [0, 0] type 1 family 0 port 8472 - 0
[  571.037855][T14368] netdevsim netdevsim0 eth1: set [1, 0] type 2 family 0 port 6081 - 0
[  571.121700][   T60] netdevsim netdevsim0 eth2: set [0, 0] type 1 family 0 port 8472 - 0
[  571.131382][   T60] netdevsim netdevsim0 eth2: set [1, 0] type 2 family 0 port 6081 - 0
[  571.171112][ T3741] netdevsim netdevsim0 eth3: set [0, 0] type 1 family 0 port 8472 - 0
[  571.199688][ T3741] netdevsim netdevsim0 eth3: set [1, 0] type 2 family 0 port 6081 - 0
[  571.509132][T29194] IPVS: set_ctl: invalid protocol: 46 224.0.0.2:20002
[  571.594053][T29200] batman_adv: batadv0: Removing interface: batadv_slave_0
[  571.616670][T29200] batman_adv: batadv0: Removing interface: batadv_slave_1
[  571.831829][T29213] tipc: Enabled bearer <eth:syzkaller0>, priority 0
[  571.867249][T29213] syzkaller0: entered promiscuous mode
[  571.872759][T29213] syzkaller0: entered allmulticast mode
[  571.920580][T29223] sch_tbf: burst 127 is lower than device syzkaller0 mtu (1514) !
[  572.028624][T29213] tipc: Resetting bearer <eth:syzkaller0>
[  572.051585][T29208] tipc: Resetting bearer <eth:syzkaller0>
[  572.116015][T29208] tipc: Disabling bearer <eth:syzkaller0>
[  572.173206][T29230] tipc: Enabled bearer <eth:syzkaller0>, priority 0
[  572.180899][T29230] syzkaller0: entered promiscuous mode
[  572.212009][T29230] syzkaller0: entered allmulticast mode
[  572.241749][T29230] sch_tbf: burst 127 is lower than device syzkaller0 mtu (1514) !
[  572.336536][T29230] tipc: Resetting bearer <eth:syzkaller0>
[  572.363211][T29247] IPVS: sync thread started: state = MASTER, mcast_ifn = veth0_virt_wifi, syncid = 33554432, id = 0
[  572.387220][T29242] IPVS: stopping master sync thread 29247 ...
[  572.387461][T29248] syzkaller0: entered promiscuous mode
[  572.399493][T29248] syzkaller0: entered allmulticast mode
[  572.447772][T29250] __nla_validate_parse: 17 callbacks suppressed
[  572.447872][T29250] netlink: 20 bytes leftover after parsing attributes in process `syz.1.6508'.
[  572.500330][T29251] netlink: 'syz.1.6508': attribute type 21 has an invalid length.
[  572.519611][T29251] IPv6: NLM_F_CREATE should be specified when creating new route
[  572.540244][T29251] IPv6: RTM_NEWROUTE with no NLM_F_CREATE or NLM_F_REPLACE
[  572.547540][T29251] IPv6: NLM_F_CREATE should be set when creating new route
[  572.554859][T29251] IPv6: NLM_F_CREATE should be set when creating new route
[  572.562125][T29251] IPv6: NLM_F_CREATE should be set when creating new route
[  572.663719][T29257] netlink: 20 bytes leftover after parsing attributes in process `syz.1.6508'.
[  572.675842][T29257] nbd: device at index 64 is going down
[  572.841480][T29266] netlink: 'syz.1.6510': attribute type 29 has an invalid length.
[  572.878491][T28144] udevd[28144]: inotify_add_watch(7, /dev/nbd64, 10) failed: No such file or directory
[  572.879327][T29266] netlink: 4 bytes leftover after parsing attributes in process `syz.1.6510'.
[  572.924139][T28144] udevd[28144]: inotify_add_watch(7, /dev/nbd64, 10) failed: No such file or directory
[  573.099093][T29279] netlink: 4 bytes leftover after parsing attributes in process `syz.1.6510'.
[  575.167046][T29227] tipc: Resetting bearer <eth:syzkaller0>
[  575.197167][T29287] netlink: 8 bytes leftover after parsing attributes in process `syz.4.6515'.
[  575.224025][T29227] tipc: Disabling bearer <eth:syzkaller0>
[  575.235600][T15806] tipc: Node number set to 1266532069
[  575.248923][T29289] lo: entered promiscuous mode
[  575.278365][T29289] tunl0: entered promiscuous mode
[  575.300706][T29289] gre0: entered promiscuous mode
[  575.343906][T29289] gretap0: entered promiscuous mode
[  575.356872][T29289] erspan0: entered promiscuous mode
[  575.370140][T29289] ip_vti0: entered promiscuous mode
[  575.477511][T29297] syzkaller0: entered promiscuous mode
[  575.485885][T29297] syzkaller0: entered allmulticast mode
[  575.505410][T29305] netlink: 8 bytes leftover after parsing attributes in process `syz.0.6521'.
[  575.612141][T29315] rdma_rxe: rxe_newlink: rxe creation allowed on top of a real device only
[  577.485398][T29327] netlink: 16 bytes leftover after parsing attributes in process `syz.0.6527'.
[  577.568457][T29334] netlink: 84 bytes leftover after parsing attributes in process `syz.5.6530'.
[  577.695833][T29338] netlink: 24 bytes leftover after parsing attributes in process `syz.0.6531'.
[  577.768592][T29349] netlink: 404 bytes leftover after parsing attributes in process `syz.5.6535'.
[  577.853878][T29352] netlink: 'syz.3.6533': attribute type 2 has an invalid length.
[  578.026959][T29365] netlink: 'syz.0.6538': attribute type 3 has an invalid length.
[  578.246440][T29382] policy can only be matched on NF_INET_PRE_ROUTING
[  578.246464][T29382] unable to load match
[  578.306420][T29385] netlink: 204 bytes leftover after parsing attributes in process `syz.1.6545'.
[  578.730109][T29416] lo: entered promiscuous mode
[  578.747320][T29416] tunl0: entered promiscuous mode
[  578.776267][T29416] gre0: entered promiscuous mode
[  578.792238][T29416] gretap0: entered promiscuous mode
[  578.809496][T29416] erspan0: entered promiscuous mode
[  578.822452][T29416] ip_vti0: entered promiscuous mode
[  579.058888][T29436] netlink: 16215 bytes leftover after parsing attributes in process `syz.3.6555'.
[  579.242294][T29446] vxcan1: entered promiscuous mode
[  579.249650][T29446] vxcan1: entered allmulticast mode
[  579.367741][T29455] netlink: 8 bytes leftover after parsing attributes in process `syz.1.6561'.
[  579.429896][T29462] netlink: 32 bytes leftover after parsing attributes in process `syz.5.6562'.
[  579.433197][T29455] netlink: 'syz.1.6561': attribute type 5 has an invalid length.
[  579.449236][T29462] netlink: 32 bytes leftover after parsing attributes in process `syz.5.6562'.
[  579.455709][T29463] netlink: 'syz.0.6563': attribute type 2 has an invalid length.
[  579.485988][T29455] netlink: 20 bytes leftover after parsing attributes in process `syz.1.6561'.
[  579.557584][T29455] geneve2: entered promiscuous mode
[  579.567600][T29455] geneve2: entered allmulticast mode
[  579.615892][   T60] netdevsim netdevsim1 netdevsim0: set [1, 1] type 2 family 0 port 256 - 0
[  579.657807][   T60] netdevsim netdevsim1 netdevsim1: set [1, 1] type 2 family 0 port 256 - 0
[  579.674884][   T60] netdevsim netdevsim1 netdevsim2: set [1, 1] type 2 family 0 port 256 - 0
[  579.715731][   T60] netdevsim netdevsim1 netdevsim3: set [1, 1] type 2 family 0 port 256 - 0
[  580.039722][T29504] Bluetooth: hci0: Opcode 0x0401 failed: -4
[  580.409396][T29525] netlink: 'syz.4.6579': attribute type 9 has an invalid length.
[  580.431232][T29525] netlink: 'syz.4.6579': attribute type 11 has an invalid length.
[  580.453394][T29525] netlink: 'syz.4.6579': attribute type 12 has an invalid length.
[  580.598466][T29536] netlink: 'syz.0.6585': attribute type 13 has an invalid length.
[  580.838983][T29536] batman_adv: batadv0: Interface deactivated: batadv_slave_0
[  580.854051][T29536] batman_adv: batadv0: Interface deactivated: batadv_slave_1
[  581.083210][T14377] netdevsim netdevsim0 eth0: unset [0, 0] type 1 family 0 port 8472 - 0
[  581.095951][T14377] netdevsim netdevsim0 eth0: unset [1, 0] type 2 family 0 port 6081 - 0
[  581.099764][T29542] openvswitch: netlink: IP tunnel dst address not specified
[  581.113353][T14377] netdevsim netdevsim0 eth1: unset [0, 0] type 1 family 0 port 8472 - 0
[  581.113387][T14377] netdevsim netdevsim0 eth1: unset [1, 0] type 2 family 0 port 6081 - 0
[  581.145658][T14377] netdevsim netdevsim0 eth2: unset [0, 0] type 1 family 0 port 8472 - 0
[  581.154662][T14377] netdevsim netdevsim0 eth2: unset [1, 0] type 2 family 0 port 6081 - 0
[  581.193046][T14377] netdevsim netdevsim0 eth3: unset [0, 0] type 1 family 0 port 8472 - 0
[  581.217276][T14377] netdevsim netdevsim0 eth3: unset [1, 0] type 2 family 0 port 6081 - 0
[  581.730918][T29592] netlink: 'syz.3.6602': attribute type 1 has an invalid length.
[  581.847946][T29601] xt_hashlimit: overflow, try lower: 18446744073709551613/4
[  581.900880][T29607] netlink: 'syz.3.6605': attribute type 1 has an invalid length.
[  582.017038][T29611] bond4: (slave vxcan3): The slave device specified does not support setting the MAC address
[  582.038437][T29611] bond4: (slave vxcan3): Error -95 calling set_mac_address
[  582.061373][ T5839] Bluetooth: hci0: command 0x0401 tx timeout
[  582.080610][T29607] gretap1: entered promiscuous mode
[  582.090182][T29607] bond4: (slave gretap1): making interface the new active one
[  582.103151][T29607] bond4: (slave gretap1): Enslaving as an active interface with an up link
[  582.151823][T29611] macvlan2: entered promiscuous mode
[  582.196097][T29611] macvlan2: entered allmulticast mode
[  582.202361][T29611] bond4: entered promiscuous mode
[  582.226540][T29611] 8021q: adding VLAN 0 to HW filter on device macvlan2
[  582.258792][T29611] bond4: (slave macvlan2): the slave hw address is in use by the bond; giving it the hw address of gretap1
[  582.281530][T29611] bond4: left promiscuous mode
[  582.458150][T29628] vlan2: entered promiscuous mode
[  582.488446][T29628] hsr_slave_1: entered promiscuous mode
[  582.494297][T29628] vlan2: entered allmulticast mode
[  582.539668][T29639] __nla_validate_parse: 14 callbacks suppressed
[  582.539687][T29639] netlink: 4 bytes leftover after parsing attributes in process `syz.3.6614'.
[  582.558231][T29628] hsr_slave_1: entered allmulticast mode
[  582.613065][T29639] hsr_slave_0: left promiscuous mode
[  582.639434][T29646] netlink: 24 bytes leftover after parsing attributes in process `syz.3.6614'.
[  582.650560][T29639] hsr_slave_1: left promiscuous mode
[  582.908050][T29665] validate_nla: 2 callbacks suppressed
[  582.908071][T29665] netlink: 'syz.4.6623': attribute type 1 has an invalid length.
[  582.960494][T29669] netlink: 16 bytes leftover after parsing attributes in process `syz.3.6624'.
[  583.054455][T29671] bond1: (slave geneve2): making interface the new active one
[  583.067253][T29671] bond1: (slave geneve2): Enslaving as an active interface with an up link
[  583.080382][ T4375] netdevsim netdevsim4 netdevsim0: set [1, 0] type 2 family 0 port 20004 - 0
[  583.132185][ T4375] netdevsim netdevsim4 netdevsim1: set [1, 0] type 2 family 0 port 20004 - 0
[  583.164000][ T4375] netdevsim netdevsim4 netdevsim2: set [1, 0] type 2 family 0 port 20004 - 0
[  583.186834][ T4375] netdevsim netdevsim4 netdevsim3: set [1, 0] type 2 family 0 port 20004 - 0
[  583.371183][T29696] netlink: 'syz.4.6632': attribute type 83 has an invalid length.
[  583.617250][T29708] dvmrp0: entered allmulticast mode
[  583.766802][T29712] netlink: 4 bytes leftover after parsing attributes in process `syz.5.6638'.
[  583.830296][T29718] netlink: 'syz.4.6640': attribute type 10 has an invalid length.
[  583.845636][T29718] netlink: 40 bytes leftover after parsing attributes in process `syz.4.6640'.
[  583.860145][T29718] team0: Port device geneve0 added
[  583.867780][ T4375] netdevsim netdevsim4 netdevsim0: set [1, 1] type 2 family 0 port 6081 - 0
[  583.900768][ T4375] netdevsim netdevsim4 netdevsim1: set [1, 1] type 2 family 0 port 6081 - 0
[  583.931723][ T4375] netdevsim netdevsim4 netdevsim2: set [1, 1] type 2 family 0 port 6081 - 0
[  583.950051][ T4375] netdevsim netdevsim4 netdevsim3: set [1, 1] type 2 family 0 port 6081 - 0
[  584.011861][T29729] pim6reg1: entered promiscuous mode
[  584.025994][T29729] pim6reg1: entered allmulticast mode
[  584.268355][T29743] netlink: 28 bytes leftover after parsing attributes in process `syz.3.6648'.
[  584.309512][T29741] netlink: 4 bytes leftover after parsing attributes in process `syz.4.6647'.
[  584.367269][T29747] netlink: 14 bytes leftover after parsing attributes in process `syz.0.6650'.
[  584.457843][T29751] netlink: 8 bytes leftover after parsing attributes in process `syz.0.6651'.
[  584.468688][T29751] netlink: 'syz.0.6651': attribute type 7 has an invalid length.
[  584.477332][T29751] netlink: 4 bytes leftover after parsing attributes in process `syz.0.6651'.
[  584.487885][T29751] netlink: 'syz.0.6651': attribute type 7 has an invalid length.
[  585.046279][T29790] team_slave_0: entered promiscuous mode
[  585.052372][T29790] team_slave_1: entered promiscuous mode
[  585.063672][T29790] 8021q: adding VLAN 0 to HW filter on device macvlan2
[  585.087935][T29790] 8021q: adding VLAN 0 to HW filter on device macvlan3
[  585.145320][T29798] netlink: 'syz.0.6667': attribute type 1 has an invalid length.
[  585.192642][T29798] workqueue: Failed to create a rescuer kthread for wq "bond3": -EINTR
[  585.247107][T29806] netlink: 'syz.3.6669': attribute type 1 has an invalid length.
[  585.297608][T29806] bond5: entered promiscuous mode
[  585.303777][T29806] 8021q: adding VLAN 0 to HW filter on device bond5
[  585.314719][T29806] netlink: 'syz.3.6669': attribute type 1 has an invalid length.
[  585.324017][T29806] netlink: 'syz.3.6669': attribute type 1 has an invalid length.
[  585.332509][T29806] netlink: 'syz.3.6669': attribute type 1 has an invalid length.
[  585.416727][T29815] nbd: must specify at least one socket
[  585.424023][T29815] nbd: must specify an index to disconnect
[  585.433420][T29815] openvswitch: netlink: Either Ethernet header or EtherType is required.
[  585.510228][T29822] bond0: entered promiscuous mode
[  585.516399][T29822] bond_slave_0: entered promiscuous mode
[  585.522193][T29822] bond_slave_1: entered promiscuous mode
[  585.911249][ T3689] netdevsim netdevsim5 eth0: set [0, 0] type 1 family 0 port 8472 - 0
[  585.923820][ T3689] netdevsim netdevsim5 eth1: set [0, 0] type 1 family 0 port 8472 - 0
[  585.936665][ T3689] netdevsim netdevsim5 eth2: set [0, 0] type 1 family 0 port 8472 - 0
[  585.947195][ T3689] netdevsim netdevsim5 eth3: set [0, 0] type 1 family 0 port 8472 - 0
[  585.996363][T29851] netdevsim netdevsim4: loading /lib/firmware/. failed with error -22
[  586.005036][T29851] netdevsim netdevsim4: Direct firmware load for . failed with error -22
[  586.013479][T29851] netdevsim netdevsim4: Falling back to sysfs fallback for: .
[  586.346867][T29882] xt_l2tp: invalid flags combination: 0
[  586.510779][T29898] bridge0: port 2(bridge_slave_1) entered disabled state
[  586.522923][T29898] bridge_slave_1: left allmulticast mode
[  586.530952][T29898] bridge_slave_1: left promiscuous mode
[  586.545782][T29898] bridge0: port 2(bridge_slave_1) entered disabled state
[  586.573617][T29898] bond0: (slave bridge_slave_1): Enslaving as an active interface with an up link
[  586.599779][T29900] bond15: entered promiscuous mode
[  586.605499][T29900] 8021q: adding VLAN 0 to HW filter on device bond15
[  586.848305][T29915] bridge3: entered promiscuous mode
[  586.853891][T29915] bridge3: entered allmulticast mode
[  586.863079][T29915] team0: Port device bridge3 added
[  587.090131][T29942] openvswitch: netlink: Missing key (keys=40, expected=100)
[  587.457827][T29959] v: renamed from veth0_vlan
[  587.642356][T29969] batadv_slave_0: entered promiscuous mode
[  588.133653][T29965] batadv_slave_0: left promiscuous mode
[  588.396446][T30016] __nla_validate_parse: 22 callbacks suppressed
[  588.396471][T30016] netlink: 8 bytes leftover after parsing attributes in process `syz.5.6722'.
[  588.427677][T30024] wlan0 speed is unknown, defaulting to 1000
[  588.437063][T30024] lo speed is unknown, defaulting to 1000
[  588.503909][T30016] validate_nla: 7 callbacks suppressed
[  588.503930][T30016] netlink: 'syz.5.6722': attribute type 1 has an invalid length.
[  588.551098][T30031] netlink: 288 bytes leftover after parsing attributes in process `syz.0.6727'.
[  588.587102][T30016] netlink: 8 bytes leftover after parsing attributes in process `syz.5.6722'.
[  588.667611][T30039] netlink: 36 bytes leftover after parsing attributes in process `syz.5.6729'.
[  588.929443][T30057] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium
[  588.956680][T30057] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium
[  588.968053][T30059] netlink: 212368 bytes leftover after parsing attributes in process `syz.1.6733'.
[  588.980174][T30058] netlink: 40 bytes leftover after parsing attributes in process `syz.1.6733'.
[  588.989529][T30057] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium
[  589.012633][T30057] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium
[  589.037842][ T5494] v: left promiscuous mode
[  589.053225][T30057] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium
[  589.102407][ T5494] v: entered promiscuous mode
[  589.111733][T30068] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium
[  589.155252][T30070] syz.1.6737: vmalloc error: size 8589938688, exceeds total pages, mode:0xdc0(GFP_KERNEL|__GFP_ZERO), nodemask=(null),cpuset=/,mems_allowed=0-1
[  589.174561][T30070] CPU: 1 UID: 0 PID: 30070 Comm: syz.1.6737 Not tainted syzkaller #0 PREEMPT(full) 
[  589.174589][T30070] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 10/25/2025
[  589.174609][T30070] Call Trace:
[  589.174618][T30070]  <TASK>
[  589.174628][T30070]  dump_stack_lvl+0xe8/0x150
[  589.174659][T30070]  warn_alloc+0x214/0x310
[  589.174682][T30070]  ? stack_trace_save+0x9c/0xe0
[  589.174715][T30070]  ? __pfx_warn_alloc+0x10/0x10
[  589.174743][T30070]  ? kasan_save_track+0x4f/0x80
[  589.174762][T30070]  ? kasan_save_track+0x3e/0x80
[  589.174778][T30070]  ? __kasan_kmalloc+0x93/0xb0
[  589.174797][T30070]  ? __kmalloc_cache_noprof+0x3e2/0x700
[  589.174816][T30070]  ? xskq_create+0x56/0x170
[  589.174845][T30070]  ? xsk_setsockopt+0x4dc/0x8d0
[  589.174869][T30070]  ? do_sock_setsockopt+0x17c/0x1b0
[  589.174890][T30070]  ? __x64_sys_setsockopt+0x13f/0x1b0
[  589.174911][T30070]  ? do_syscall_64+0xec/0xf80
[  589.174935][T30070]  __vmalloc_node_range_noprof+0x134/0x16a0
[  589.174992][T30070]  ? __pfx___vmalloc_node_range_noprof+0x10/0x10
[  589.175019][T30070]  ? __kasan_kmalloc+0x93/0xb0
[  589.175042][T30070]  vmalloc_user_noprof+0xad/0xf0
[  589.175060][T30070]  ? xskq_create+0xbf/0x170
[  589.175085][T30070]  xskq_create+0xbf/0x170
[  589.175113][T30070]  xsk_init_queue+0xb0/0x110
[  589.175141][T30070]  xsk_setsockopt+0x4dc/0x8d0
[  589.175170][T30070]  ? __pfx_xsk_setsockopt+0x10/0x10
[  589.175196][T30070]  ? __pfx_aa_sk_perm+0x10/0x10
[  589.175222][T30070]  ? aa_sock_opt_perm+0xff/0x1a0
[  589.175249][T30070]  ? bpf_lsm_socket_setsockopt+0x9/0x20
[  589.175265][T30070]  ? __pfx_xsk_setsockopt+0x10/0x10
[  589.175289][T30070]  do_sock_setsockopt+0x17c/0x1b0
[  589.175314][T30070]  __x64_sys_setsockopt+0x13f/0x1b0
[  589.175340][T30070]  do_syscall_64+0xec/0xf80
[  589.175359][T30070]  ? entry_SYSCALL_64_after_hwframe+0x77/0x7f
[  589.175376][T30070]  ? trace_irq_disable+0x37/0x100
[  589.175400][T30070]  ? clear_bhb_loop+0x60/0xb0
[  589.175421][T30070]  entry_SYSCALL_64_after_hwframe+0x77/0x7f
[  589.175444][T30070] RIP: 0033:0x7f2017d8f749
[  589.175462][T30070] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48
[  589.175479][T30070] RSP: 002b:00007f2018cfa038 EFLAGS: 00000246 ORIG_RAX: 0000000000000036
[  589.175499][T30070] RAX: ffffffffffffffda RBX: 00007f2017fe5fa0 RCX: 00007f2017d8f749
[  589.175514][T30070] RDX: 0000000000000006 RSI: 000000000000011b RDI: 0000000000000003
[  589.175525][T30070] RBP: 00007f2017e13f91 R08: 0000000000000004 R09: 0000000000000000
[  589.175537][T30070] R10: 0000200000000000 R11: 0000000000000246 R12: 0000000000000000
[  589.175549][T30070] R13: 00007f2017fe6038 R14: 00007f2017fe5fa0 R15: 00007fff517ec668
[  589.175578][T30070]  </TASK>
[  589.206347][T30074] netlink: 59 bytes leftover after parsing attributes in process `syz.0.6736'.
[  589.325516][T30070] Mem-Info:
[  589.338018][T30057] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium
[  589.406730][T30068] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium
[  589.418053][T30070] active_anon:7983 inactive_anon:0 isolated_anon:0
[  589.418053][T30070]  active_file:3402 inactive_file:40096 isolated_file:0
[  589.418053][T30070]  unevictable:768 dirty:93 writeback:0
[  589.418053][T30070]  slab_reclaimable:13468 slab_unreclaimable:179748
[  589.418053][T30070]  mapped:36267 shmem:3065 pagetables:1580
[  589.418053][T30070]  sec_pagetables:0 bounce:0
[  589.418053][T30070]  kernel_misc_reclaimable:0
[  589.418053][T30070]  free:1223061 free_pcp:14292 free_cma:0
[  589.418126][T30070] Node 0 active_anon:31932kB inactive_anon:0kB active_file:13608kB inactive_file:160184kB unevictable:1536kB isolated(anon):0kB isolated(file):0kB mapped:145068kB dirty:368kB writeback:0kB shmem:10724kB shmem_thp:0kB shmem_pmdmapped:0kB anon_thp:0kB kernel_stack:16796kB pagetables:6204kB sec_pagetables:0kB all_unreclaimable? no Balloon:0kB
[  589.429085][T30074] netlink: 'syz.0.6736': attribute type 83 has an invalid length.
[  589.486360][T30070] Node 1 active_anon:0kB inactive_anon:0kB active_file:0kB inactive_file:200kB unevictable:1536kB isolated(anon):0kB isolated(file):0kB mapped:0kB dirty:4kB writeback:0kB shmem:1536kB shmem_thp:0kB shmem_pmdmapped:0kB anon_thp:0kB kernel_stack:64kB pagetables:116kB sec_pagetables:0kB all_unreclaimable? no Balloon:0kB
[  589.486418][T30070] Node 0 DMA free:15360kB boost:0kB min:204kB low:252kB high:300kB reserved_highatomic:0KB free_highatomic:0KB active_anon:0kB inactive_anon:0kB active_file:0kB inactive_file:0kB unevictable:0kB writepending:0kB zspages:0kB present:15992kB managed:15360kB mlocked:0kB bounce:0kB free_pcp:0kB local_pcp:0kB free_cma:0kB
[  589.486482][T30070] lowmem_reserve[]: 0 2499 2501 2501 2501
[  589.486527][T30070] Node 0 DMA32 free:966896kB boost:0kB min:34264kB low:42828kB high:51392kB reserved_highatomic:0KB free_highatomic:0KB active_anon:33232kB inactive_anon:0kB active_file:13608kB inactive_file:160184kB unevictable:1536kB writepending:368kB zspages:0kB present:3129332kB managed:2559500kB mlocked:0kB bounce:0kB free_pcp:48676kB local_pcp:19388kB free_cma:0kB
[  589.486591][T30070] lowmem_reserve[]: 0 0 1 1 1
[  589.486632][T30070] Node 0 Normal free:0kB boost:0kB min:24kB low:28kB high:32kB reserved_highatomic:0KB free_highatomic:0KB active_anon:0kB inactive_anon:0kB active_file:0kB inactive_file:0kB unevictable:0kB writepending:0kB zspages:0kB present:1048580kB managed:1900kB mlocked:0kB bounce:0kB free_pcp:0kB local_pcp:0kB free_cma:0kB
[  589.486700][T30070] lowmem_reserve[]: 0 0 0 0 0
[  589.486743][T30070] Node 1 Normal free:3909924kB boost:0kB min:55612kB low:69512kB high:83412kB reserved_highatomic:0KB free_highatomic:0KB active_anon:0kB inactive_anon:0kB active_file:0kB inactive_file:200kB unevictable:1536kB writepending:4kB zspages:0kB present:4194300kB managed:4111100kB mlocked:0kB bounce:0kB free_pcp:7076kB local_pcp:3872kB free_cma:0kB
[  589.486807][T30070] lowmem_reserve[]: 0 0 0 0 0
[  589.486849][T30070] Node 0 DMA: 0*4kB 0*8kB 0*16kB 0*32kB 0*64kB 0*128kB 0*256kB 0*512kB 
[  589.578484][T30068] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium
[  589.690720][T30070] 1*1024kB 
[  589.798311][T30057] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium
[  589.848622][T30057] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium
[  589.884311][T30070] (U) 1*2048kB (M) 3*4096kB (M) = 15360kB
[  589.897208][T30070] Node 0 DMA32: 8034*4kB (UE) 6033*8kB (UE) 3184*16kB (U) 161*32kB (UE) 552*64kB (UME) 440*128kB (UME) 350*256kB (UME) 268*512kB (UME) 179*1024kB (UM) 14*2048kB (UM) 73*4096kB (UM) = 965936kB
[  589.905874][T30068] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium
[  589.963994][T30070] Node 0 Normal: 0*4kB 0*8kB 0*16kB 0*32kB 0*64kB 0*128kB 0*256kB 0*512kB 0*1024kB 0*2048kB 0*4096kB = 0kB
[  589.978613][T30057] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium
[  590.020030][T30070] Node 1 Normal: 169*4kB (UME) 46*8kB (UME) 35*16kB (UME) 213*32kB (UME) 81*64kB (UME) 16*128kB (UME) 2*256kB (M) 3*512kB (UM) 3*1024kB (UME) 1*2048kB (E) 949*4096kB (M) = 3909924kB
[  590.028200][T30068] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium
[  590.059363][T30068] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium
[  590.103958][T30070] Node 0 hugepages_total=0 hugepages_free=0 hugepages_surp=0 hugepages_size=1048576kB
[  590.110575][T30068] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium
[  590.134796][T30070] Node 0 hugepages_total=2 hugepages_free=2 hugepages_surp=0 hugepages_size=2048kB
[  590.158131][T30070] Node 1 hugepages_total=0 hugepages_free=0 hugepages_surp=0 hugepages_size=1048576kB
[  590.175482][T30070] Node 1 hugepages_total=2 hugepages_free=2 hugepages_surp=0 hugepages_size=2048kB
[  590.188675][T30057] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium
[  590.215930][T30070] 44881 total pagecache pages
[  590.220650][T30070] 0 pages in swap cache
[  590.247880][T30070] Free swap  = 124996kB
[  590.252075][T30070] Total swap = 124996kB
[  590.263100][T30068] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium
[  590.289289][T30070] 2097051 pages RAM
[  590.299435][T30070] 0 pages HighMem/MovableOnly
[  590.304154][T30070] 425086 pages reserved
[  590.326845][T30057] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium
[  590.342987][T30070] 0 pages cma reserved
[  590.372514][T30068] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium
[  590.486305][T30107] netlink: 24 bytes leftover after parsing attributes in process `syz.4.6743'.
[  590.502041][T30109] netlink: 8 bytes leftover after parsing attributes in process `syz.1.6744'.
[  590.511434][T30107] netlink: 24 bytes leftover after parsing attributes in process `syz.4.6743'.
[  590.858697][T30125] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium
[  590.878434][T30129] syzkaller1: entered promiscuous mode
[  590.884073][T30129] syzkaller1: entered allmulticast mode
[  591.168045][T30146] vlan4: entered promiscuous mode
[  591.173277][T30146] ip6gretap0: entered promiscuous mode
[  591.368799][T30158] x_tables: duplicate underflow at hook 2
[  591.528837][T30163] syzkaller0: entered promiscuous mode
[  591.534347][T30163] syzkaller0: entered allmulticast mode
[  591.554862][T30173] syzkaller0: entered promiscuous mode
[  591.563505][T30173] syzkaller0: entered allmulticast mode
[  593.363676][T30178] bridge3: entered promiscuous mode
[  593.369389][T30178] bridge3: entered allmulticast mode
[  593.656059][T30196] xt_CT: You must specify a L4 protocol and not use inversions on it
[  593.677333][T30201] netlink: 'syz.0.6773': attribute type 12 has an invalid length.
[  593.686050][T30196] netlink: 'syz.5.6772': attribute type 2 has an invalid length.
[  593.743395][T30201] netlink: 'syz.0.6773': attribute type 29 has an invalid length.
[  593.784551][T30201] __nla_validate_parse: 3 callbacks suppressed
[  593.784568][T30201] netlink: 148 bytes leftover after parsing attributes in process `syz.0.6773'.
[  593.835787][T30201] netlink: 'syz.0.6773': attribute type 2 has an invalid length.
[  593.841520][T30206] netlink: 'syz.3.6775': attribute type 9 has an invalid length.
[  593.849546][T30201] netlink: 23 bytes leftover after parsing attributes in process `syz.0.6773'.
[  593.873121][T30206] netlink: 'syz.3.6775': attribute type 11 has an invalid length.
[  593.925635][T30206] netlink: 'syz.3.6775': attribute type 12 has an invalid length.
[  593.982926][T30206] netlink: 210020 bytes leftover after parsing attributes in process `syz.3.6775'.
[  594.031849][T30206] netlink: 4 bytes leftover after parsing attributes in process `syz.3.6775'.
[  594.056246][T30214] xt_hashlimit: invalid rate
[  594.551788][T30254] netlink: 'syz.4.6788': attribute type 21 has an invalid length.
[  594.565446][T30254] netlink: 4 bytes leftover after parsing attributes in process `syz.4.6788'.
[  594.587021][T30254] netlink: 92 bytes leftover after parsing attributes in process `syz.4.6788'.
[  594.668881][T30259] bond3: option primary: mode dependency failed, not supported in mode balance-rr(0)
[  594.684176][T30264] netlink: 16 bytes leftover after parsing attributes in process `syz.4.6788'.
[  594.684400][T30259] bond3 (unregistering): Released all slaves
[  594.753494][T30264] netlink: 4 bytes leftover after parsing attributes in process `syz.4.6788'.
[  595.218429][T30298] ip6tnl0: Caught tx_queue_len zero misconfig
[  596.041559][T30322] netlink: 'syz.3.6804': attribute type 12 has an invalid length.
[  596.370169][T30341] netlink: 212 bytes leftover after parsing attributes in process `syz.0.6807'.
[  596.431840][T30339] syzkaller0: entered promiscuous mode
[  596.461112][T30339] syzkaller0: entered allmulticast mode
[  596.667828][T30356] netlink: 'syz.0.6812': attribute type 1 has an invalid length.
[  596.861384][T30362] netlink: 32 bytes leftover after parsing attributes in process `syz.4.6813'.
[  597.054481][T30373] block nbd4: Unsupported socket: should be TCP or UNIX.
[  598.492444][T30356] workqueue: Failed to create a rescuer kthread for wq "bond3": -EINTR
[  598.505632][T30373] batman_adv: batadv0: Adding interface: dummy0
[  598.535190][T30373] batman_adv: batadv0: The MTU of interface dummy0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem.
[  598.573915][ T5830] Bluetooth: hci0: command 0x0401 tx timeout
[  598.577095][T30373] batman_adv: batadv0: Not using interface dummy0 (retrying later): interface not active
[  598.592121][T30391] openvswitch: netlink: IP tunnel dst address not specified
[  599.049021][T30420] syzkaller0: entered promiscuous mode
[  599.054548][T30420] syzkaller0: entered allmulticast mode
[  599.074131][T30420] tipc: Enabled bearer <eth:syzkaller0>, priority 0
[  599.087404][T30420] tipc: Resetting bearer <eth:syzkaller0>
[  599.098541][T30419] tipc: Resetting bearer <eth:syzkaller0>
[  599.129727][T30419] tipc: Disabling bearer <eth:syzkaller0>
[  600.361294][T30428] __nla_validate_parse: 3 callbacks suppressed
[  600.361314][T30428] netlink: 72 bytes leftover after parsing attributes in process `syz.4.6833'.
[  600.385630][T30431] netlink: 212368 bytes leftover after parsing attributes in process `syz.3.6832'.
[  600.460944][T30428] bond2 (unregistering): Released all slaves
[  600.498340][T30440] openvswitch: netlink: Flow actions may not be safe on all matching packets.
[  600.577467][T30446] openvswitch: netlink: Key 6 has unexpected len 133 expected 2
[  600.678467][T30450] A link change request failed with some changes committed already. Interface lo may have been left with an inconsistent configuration, please check.
[  600.700972][T30453] A link change request failed with some changes committed already. Interface lo may have been left with an inconsistent configuration, please check.
[  600.863300][T30466] validate_nla: 1 callbacks suppressed
[  600.863382][T30466] netlink: 'syz.3.6844': attribute type 1 has an invalid length.
[  600.933974][T30462] syzkaller0: entered promiscuous mode
[  600.940865][T30462] syzkaller0: entered allmulticast mode
[  600.957165][T30472] netlink: 'syz.5.6845': attribute type 13 has an invalid length.
[  600.987428][T30466] bond6: entered promiscuous mode
[  600.993003][T30466] 8021q: adding VLAN 0 to HW filter on device bond6
[  601.028083][T30476] netlink: 24 bytes leftover after parsing attributes in process `syz.4.6846'.
[  601.285625][T30481] netlink: 'syz.1.6847': attribute type 1 has an invalid length.
[  601.338534][T30482] netlink: 8 bytes leftover after parsing attributes in process `syz.1.6847'.
[  601.354643][T30482] netlink: 19 bytes leftover after parsing attributes in process `syz.1.6847'.
[  602.714878][T30472] macvtap0: entered allmulticast mode
[  602.720867][T30472] macvtap0: refused to change device tx_queue_len
[  602.745569][T30478] netlink: 32 bytes leftover after parsing attributes in process `syz.4.6846'.
[  602.775531][T30479] netlink: 128 bytes leftover after parsing attributes in process `syz.4.6846'.
[  602.823536][T30481] workqueue: Failed to create a rescuer kthread for wq "bond1": -EINTR
[  602.860610][T30488] netlink: 64 bytes leftover after parsing attributes in process `syz.5.6848'.
[  603.173159][T30510] netlink: 'syz.1.6855': attribute type 1 has an invalid length.
[  603.206241][T30510] xt_l2tp: v2 doesn't support IP mode
[  603.312133][T30513] openvswitch: netlink: Flow actions attr not present in new flow.
[  603.659873][T30529] netlink: 8 bytes leftover after parsing attributes in process `syz.1.6861'.
[  603.683921][T30531] netlink: 212368 bytes leftover after parsing attributes in process `syz.5.6860'.
[  604.191336][T30574] blkio.reset_stats is deprecated
[  606.944929][T30640] __nla_validate_parse: 5 callbacks suppressed
[  606.944949][T30640] netlink: 16 bytes leftover after parsing attributes in process `syz.3.6890'.
[  606.987254][T30645] netlink: 16 bytes leftover after parsing attributes in process `syz.5.6891'.
[  607.062908][T30656] netlink: 'syz.1.6893': attribute type 13 has an invalid length.
[  607.138507][T30661] nft_compat: unsupported protocol 0
[  607.533203][T30694] x_tables: unsorted underflow at hook 3
[  607.553256][T30691] bridge4: entered promiscuous mode
[  607.556968][T30697] netlink: 68 bytes leftover after parsing attributes in process `syz.5.6903'.
[  607.570020][T30691] bridge4: entered allmulticast mode
[  607.649093][T30704] syzkaller0: entered promiscuous mode
[  607.659698][T30704] syzkaller0: entered allmulticast mode
[  607.672455][T30704] netlink: 20 bytes leftover after parsing attributes in process `syz.5.6905'.
[  607.743641][T30710] netlink: 16 bytes leftover after parsing attributes in process `syz.3.6908'.
[  607.751986][T30709] netlink: 13 bytes leftover after parsing attributes in process `syz.1.6907'.
[  607.764102][T30710] netlink: 32 bytes leftover after parsing attributes in process `syz.3.6908'.
[  607.868359][T30714] openvswitch: netlink: Unexpected mask (mask=1040, allowed=10048)
[  608.001417][T30723] syzkaller0: entered promiscuous mode
[  608.009562][T30723] syzkaller0: entered allmulticast mode
[  608.059511][T30718] syzkaller0: entered promiscuous mode
[  608.071852][T30718] syzkaller0: entered allmulticast mode
[  608.174814][T30735] netlink: 256 bytes leftover after parsing attributes in process `syz.3.6917'.
[  608.189385][T30735] netlink: 8 bytes leftover after parsing attributes in process `syz.3.6917'.
[  608.198936][T30735] netlink: 4 bytes leftover after parsing attributes in process `syz.3.6917'.
[  608.229675][T30735] netlink: 'syz.3.6917': attribute type 15 has an invalid length.
[  608.317602][ T2982] netdevsim netdevsim3 ������: set [0, 0] type 1 family 0 port 256 - 0
[  608.326355][T30735] netlink: 'syz.3.6917': attribute type 15 has an invalid length.
[  608.343443][ T2982] netdevsim netdevsim3 netdevsim1: set [0, 0] type 1 family 0 port 256 - 0
[  608.382401][ T2982] netdevsim netdevsim3 netdevsim2: set [0, 0] type 1 family 0 port 256 - 0
[  608.405415][ T2982] netdevsim netdevsim3 netdevsim3: set [0, 0] type 1 family 0 port 256 - 0
[  608.823410][ T5943] IPVS: starting estimator thread 0...
[  608.829310][T30769] IPVS: ip_vs_add_dest(): lower threshold is higher than upper threshold
[  608.943000][T30771] IPVS: using max 27 ests per chain, 64800 per kthread
[  608.957379][T30779] tipc: Started in network mode
[  608.984584][T30779] tipc: Node identity ac14140f, cluster identity 4711
[  609.011582][T30779] tipc: New replicast peer: 255.255.255.255
[  609.075786][T30779] tipc: Enabled bearer <udp:syz2>, priority 10
[  609.119719][T30786] x_tables: ip_tables: TCPOPTSTRIP target: only valid in mangle table, not security
[  609.871345][T30827] batman_adv: Cannot find parent device. Skipping batadv-on-batadv check for gretap1
[  610.146729][ T8516] tipc: Node number set to 2886997007
[  610.200965][T30858] A link change request failed with some changes committed already. Interface lo may have been left with an inconsistent configuration, please check.
[  610.219852][T30857] A link change request failed with some changes committed already. Interface lo may have been left with an inconsistent configuration, please check.
[  610.420160][T30877] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium
[  610.449455][T30877] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium
[  610.481831][T30879] netlink: 'syz.3.6965': attribute type 1 has an invalid length.
[  610.498801][T30877] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium
[  610.530828][T30877] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium
[  610.535640][T30886] Unknown options in mask b7f2
[  610.570508][T30889] bond7: (slave geneve2): making interface the new active one
[  610.578995][T30889] bond7: (slave geneve2): Enslaving as an active interface with an up link
[  610.589978][ T3741] netdevsim netdevsim3 ������: set [1, 1] type 2 family 0 port 20004 - 0
[  610.600578][ T3741] netdevsim netdevsim3 netdevsim1: set [1, 1] type 2 family 0 port 20004 - 0
[  610.609522][ T3741] netdevsim netdevsim3 netdevsim2: set [1, 1] type 2 family 0 port 20004 - 0
[  610.618711][ T3741] netdevsim netdevsim3 netdevsim3: set [1, 1] type 2 family 0 port 20004 - 0
[  610.643958][T30876] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium
[  611.415367][ T5830] Bluetooth: hci0: command 0x0401 tx timeout
[  611.816668][T30943] x_tables: duplicate entry at hook 2
[  611.873384][T30943] IPVS: Scheduler module ip_vs_sip not found
[  611.880187][T30946] netlink: 'syz.1.6984': attribute type 1 has an invalid length.
[  611.891425][T30946] netlink: 'syz.1.6984': attribute type 3 has an invalid length.
[  611.902460][T30946] NCSI netlink: No device for ifindex 813332851
[  612.484237][T30990] macsec2: entered promiscuous mode
[  612.507975][T30990] veth1_macvtap: entered promiscuous mode
[  612.520102][T30990] veth1_macvtap: left promiscuous mode
[  612.561611][T30996] __nla_validate_parse: 9 callbacks suppressed
[  612.561629][T30996] netlink: 12 bytes leftover after parsing attributes in process `syz.5.7003'.
[  612.627419][T30999] netlink: 216 bytes leftover after parsing attributes in process `syz.1.7005'.
[  612.806545][T31003] syzkaller0: entered promiscuous mode
[  612.812402][T31003] syzkaller0: entered allmulticast mode
[  612.881520][T31016] openvswitch: netlink: Key 9 has unexpected len 2 expected 4
[  614.628158][T31034] A link change request failed with some changes committed already. Interface lo may have been left with an inconsistent configuration, please check.
[  614.664730][T31033] wlan0 speed is unknown, defaulting to 1000
[  614.678643][T31033] lo speed is unknown, defaulting to 1000
[  615.001073][T31055] netlink: 24 bytes leftover after parsing attributes in process `syz.3.7023'.
[  615.044949][T31055] bond8 (unregistering): Released all slaves
[  615.190143][T31065] netlink: 'syz.0.7025': attribute type 29 has an invalid length.
[  615.200872][T31065] netlink: 'syz.0.7025': attribute type 29 has an invalid length.
[  615.549315][T31083] netlink: 20 bytes leftover after parsing attributes in process `syz.3.7031'.
[  615.633712][T31086] xt_hashlimit: size too large, truncated to 1048576
[  615.991799][T31105] netlink: 32 bytes leftover after parsing attributes in process `syz.1.7040'.
[  616.043927][T31106] netlink: 9 bytes leftover after parsing attributes in process `syz.3.7038'.
[  616.077822][T31110] netlink: 'syz.0.7041': attribute type 1 has an invalid length.
[  616.098814][T31106] netlink: 'syz.3.7038': attribute type 21 has an invalid length.
[  616.133491][T31117] netlink: 12 bytes leftover after parsing attributes in process `syz.1.7043'.
[  616.170784][T31110] 8021q: adding VLAN 0 to HW filter on device bond3
[  616.193981][T31121] xt_hashlimit: size too large, truncated to 1048576
[  616.317816][T31130] netlink: 8 bytes leftover after parsing attributes in process `syz.5.7048'.
[  616.351520][T31129] 8021q: adding VLAN 0 to HW filter on device bond8
[  616.362220][T31130] netlink: 8 bytes leftover after parsing attributes in process `syz.5.7048'.
[  616.372208][T31130] netlink: 8 bytes leftover after parsing attributes in process `syz.5.7048'.
[  616.849849][T31165] netlink: 'syz.5.7055': attribute type 1 has an invalid length.
[  616.859904][T31165] netlink: 'syz.5.7055': attribute type 1 has an invalid length.
[  617.232873][T31185] sock: sock_set_timeout: `syz.1.7063' (pid 31185) tries to set negative timeout
[  617.456835][T31195] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium
[  617.479295][T31195] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium
[  617.506887][T31195] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium
[  617.550282][T31195] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium
[  617.566994][T31195] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium
[  617.606542][T31194] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium
[  617.782093][T31217] xt_CT: You must specify a L4 protocol and not use inversions on it
[  617.851981][T31219] __nla_validate_parse: 39 callbacks suppressed
[  617.852000][T31219] netlink: 8 bytes leftover after parsing attributes in process `syz.1.7073'.
[  618.032463][T31235] netlink: 'syz.1.7076': attribute type 1 has an invalid length.
[  618.041404][T31235] netlink: 'syz.1.7076': attribute type 21 has an invalid length.
[  618.049576][T31235] IPv6: NLM_F_CREATE should be specified when creating new route
[  618.062186][T31235] netlink: 'syz.1.7076': attribute type 10 has an invalid length.
[  618.071164][T31235] netlink: 228 bytes leftover after parsing attributes in process `syz.1.7076'.
[  618.174640][T31240] netlink: 'syz.0.7078': attribute type 13 has an invalid length.
[  618.246357][T31241] netlink: 28 bytes leftover after parsing attributes in process `syz.5.7079'.
[  618.412103][T31253] 8021q: adding VLAN 0 to HW filter on device bond4
[  618.507531][T31263] IPVS: sync thread started: state = BACKUP, mcast_ifn = vcan0, syncid = 0, id = 0
[  618.566839][T31269] IPVS: set_ctl: invalid protocol: 135 172.20.20.187:20003
[  618.637495][T31275] tipc: Enabling of bearer <eth:syzkaller0> rejected, failed to enable media
[  618.721444][T31277] syzkaller1: entered promiscuous mode
[  618.727620][T31277] syzkaller1: entered allmulticast mode
[  618.806687][T31281] netlink: 4 bytes leftover after parsing attributes in process `syz.3.7092'.
[  618.828724][T31279] netdevsim netdevsim3 netdevsim3 (unregistering): unset [0, 0] type 1 family 0 port 256 - 0
[  618.840725][T31279] netdevsim netdevsim3 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[  618.851548][T31279] netdevsim netdevsim3 netdevsim3 (unregistering): unset [1, 1] type 2 family 0 port 20004 - 0
[  618.888225][T31283] bond1: entered promiscuous mode
[  618.893667][T31283] 8021q: adding VLAN 0 to HW filter on device bond1
[  618.919222][T31284] bond2: entered promiscuous mode
[  618.924644][T31284] 8021q: adding VLAN 0 to HW filter on device bond2
[  619.037809][T31279] netdevsim netdevsim3 netdevsim2 (unregistering): unset [0, 0] type 1 family 0 port 256 - 0
[  619.049270][T31279] netdevsim netdevsim3 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[  619.060796][T31279] netdevsim netdevsim3 netdevsim2 (unregistering): unset [1, 1] type 2 family 0 port 20004 - 0
[  619.164743][T31279] netdevsim netdevsim3 netdevsim1 (unregistering): unset [0, 0] type 1 family 0 port 256 - 0
[  619.195366][T31279] netdevsim netdevsim3 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[  619.211687][T31279] netdevsim netdevsim3 netdevsim1 (unregistering): unset [1, 1] type 2 family 0 port 20004 - 0
[  619.281739][T31302] netlink: 28 bytes leftover after parsing attributes in process `syz.0.7097'.
[  619.356326][T31279] netdevsim netdevsim3 ������ (unregistering): unset [0, 0] type 1 family 0 port 256 - 0
[  619.378585][T31279] netdevsim netdevsim3 ������ (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[  619.394778][T31279] netdevsim netdevsim3 ������ (unregistering): unset [1, 1] type 2 family 0 port 20004 - 0
[  619.417926][T31306] netlink: 4420 bytes leftover after parsing attributes in process `syz.5.7098'.
[  619.425345][T31307] netlink: 4420 bytes leftover after parsing attributes in process `syz.5.7098'.
[  619.427270][T31306] openvswitch: netlink: Flow key attr not present in new flow.
[  619.437761][T31307] openvswitch: netlink: Flow key attr not present in new flow.
[  619.513760][T31309] netlink: 176 bytes leftover after parsing attributes in process `syz.0.7099'.
[  619.552660][T31309] netlink: 32 bytes leftover after parsing attributes in process `syz.0.7099'.
[  619.574193][T14368] netdevsim netdevsim3 eth0: set [0, 0] type 1 family 0 port 256 - 0
[  619.585380][T14368] netdevsim netdevsim3 eth0: set [1, 0] type 2 family 0 port 20004 - 0
[  619.593655][T14368] netdevsim netdevsim3 eth0: set [1, 1] type 2 family 0 port 6081 - 0
[  619.614029][T14368] netdevsim netdevsim3 eth1: set [0, 0] type 1 family 0 port 256 - 0
[  619.623248][T14368] netdevsim netdevsim3 eth1: set [1, 0] type 2 family 0 port 20004 - 0
[  619.631863][T14368] netdevsim netdevsim3 eth1: set [1, 1] type 2 family 0 port 6081 - 0
[  619.648841][ T1023] netdevsim netdevsim3 eth2: set [0, 0] type 1 family 0 port 256 - 0
[  619.658693][ T1023] netdevsim netdevsim3 eth2: set [1, 0] type 2 family 0 port 20004 - 0
[  619.667161][ T1023] netdevsim netdevsim3 eth2: set [1, 1] type 2 family 0 port 6081 - 0
[  619.716641][T31317] xt_cluster: you have exceeded the maximum number of cluster nodes (37482740 > 32)
[  619.730360][T31314] bond17: option all_slaves_active: invalid value (222)
[  619.743399][T31314] bond17 (unregistering): Released all slaves
[  619.803728][T14368] netdevsim netdevsim3 eth3: set [0, 0] type 1 family 0 port 256 - 0
[  619.812543][T14368] netdevsim netdevsim3 eth3: set [1, 0] type 2 family 0 port 20004 - 0
[  619.821993][T14368] netdevsim netdevsim3 eth3: set [1, 1] type 2 family 0 port 6081 - 0
[  619.846991][T31319] netlink: 32 bytes leftover after parsing attributes in process `syz.0.7103'.
[  619.903235][T31321] syzkaller0: entered promiscuous mode
[  619.909065][T31321] syzkaller0: entered allmulticast mode
[  619.954208][T31321] tipc: Enabled bearer <eth:syzkaller0>, priority 0
[  619.979463][T31320] tipc: Resetting bearer <eth:syzkaller0>
[  620.027207][T31320] tipc: Disabling bearer <eth:syzkaller0>
[  620.207697][T31341] syzkaller0: entered promiscuous mode
[  620.217446][T31341] syzkaller0: entered allmulticast mode
[  620.638116][T31367] syzkaller0: entered promiscuous mode
[  620.643632][T31367] syzkaller0: entered allmulticast mode
[  620.664701][T31367] tipc: Enabled bearer <eth:syzkaller0>, priority 0
[  620.682105][T31366] tipc: Resetting bearer <eth:syzkaller0>
[  620.720256][T31366] tipc: Disabling bearer <eth:syzkaller0>
[  621.271833][T31409] validate_nla: 5 callbacks suppressed
[  621.271852][T31409] netlink: 'syz.5.7137': attribute type 1 has an invalid length.
[  621.287728][T31409] netlink: 'syz.5.7137': attribute type 2 has an invalid length.
[  621.296553][T31409] netlink: 'syz.5.7137': attribute type 2 has an invalid length.
[  621.304280][T31409] netlink: 'syz.5.7137': attribute type 2 has an invalid length.
[  621.317941][T31409] 0: reclassify loop, rule prio 0, protocol 800
[  621.354760][T31411] mac80211_hwsim hwsim67 syzkaller0: entered promiscuous mode
[  621.362604][T31411] mac80211_hwsim hwsim67 syzkaller0: entered allmulticast mode
[  621.465400][   T30] audit: type=1107 audit(1768154150.158:75): pid=31416 uid=0 auid=4294967295 ses=4294967295 subj=unconfined msg='�h�aL
[  621.465400][   T30] 8�ٱn~�y��cXQ�)몉A�P��]���'
[  621.603261][T31421] 8021q: adding VLAN 0 to HW filter on device bond3
[  621.636504][T31425] vlan2: entered allmulticast mode
[  621.646012][T31425] bond3: entered allmulticast mode
[  621.742436][T31437] SET target dimension over the limit!
[  621.842265][T31436] xt_CT: No such helper "syz1"
[  621.905637][T31442] syzkaller0: entered promiscuous mode
[  621.922430][T31442] syzkaller0: entered allmulticast mode
[  622.687325][T31478] syzkaller0: entered promiscuous mode
[  622.694530][T31478] syzkaller0: entered allmulticast mode
[  622.990319][T31502] netlink: 'syz.0.7168': attribute type 1 has an invalid length.
[  624.309495][ T1301] aoe: packet could not be sent on bond0.  consider increasing tx_queue_len
[  624.328343][ T1301] clip:clip_start_xmit: skb_dst(skb) == NULL
[  624.632483][T31496] netlink: 'syz.1.7167': attribute type 10 has an invalid length.
[  624.641175][T31502] workqueue: Failed to create a rescuer kthread for wq "bond5": -EINTR
[  624.662819][T31508] tipc: Enabling of bearer <eth:syzkaller0> rejected, failed to enable media
[  624.999216][T26617] Bluetooth: hci2: unexpected cc 0x0c03 length: 249 > 1
[  625.010271][T26617] Bluetooth: hci2: unexpected cc 0x1003 length: 249 > 9
[  625.033425][T26617] Bluetooth: hci2: unexpected cc 0x1001 length: 249 > 9
[  625.041904][T26617] Bluetooth: hci2: unexpected cc 0x0c23 length: 249 > 4
[  625.049946][T26617] Bluetooth: hci2: unexpected cc 0x0c38 length: 249 > 2
[  625.139631][T31542] syzkaller0: entered promiscuous mode
[  625.150094][T31542] syzkaller0: entered allmulticast mode
[  625.212113][T31529] wlan0 speed is unknown, defaulting to 1000
[  625.213750][T31542] tipc: Enabled bearer <eth:syzkaller0>, priority 0
[  625.227994][T31529] lo speed is unknown, defaulting to 1000
[  625.236630][T31553] netlink: 'syz.3.7178': attribute type 10 has an invalid length.
[  625.244870][T31541] tipc: Resetting bearer <eth:syzkaller0>
[  625.269006][T31541] tipc: Disabling bearer <eth:syzkaller0>
[  625.299023][T31553] bridge_slave_1: left allmulticast mode
[  625.316246][T31553] bridge_slave_1: left promiscuous mode
[  625.322068][T31553] bridge0: port 2(bridge_slave_1) entered disabled state
[  625.374614][T31553] bond0: (slave bridge_slave_1): Enslaving as an active interface with an up link
[  625.649885][T31568] FAULT_INJECTION: forcing a failure.
[  625.649885][T31568] name failslab, interval 1, probability 0, space 0, times 1
[  625.684175][T31568] CPU: 1 UID: 0 PID: 31568 Comm: syz.5.7186 Not tainted syzkaller #0 PREEMPT(full) 
[  625.684226][T31568] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 10/25/2025
[  625.684251][T31568] Call Trace:
[  625.684267][T31568]  <TASK>
[  625.684286][T31568]  dump_stack_lvl+0xe8/0x150
[  625.684320][T31568]  should_fail_ex+0x414/0x560
[  625.684354][T31568]  should_failslab+0xa8/0x100
[  625.684379][T31568]  __kmalloc_cache_noprof+0x84/0x700
[  625.684399][T31568]  ? sctp_add_bind_addr+0x8c/0x370
[  625.684431][T31568]  sctp_add_bind_addr+0x8c/0x370
[  625.684454][T31568]  ? sctp_auto_asconf_init+0x15c/0x1e0
[  625.684478][T31568]  sctp_do_bind+0x5b0/0x9d0
[  625.684509][T31568]  sctp_bindx_add+0xa9/0x210
[  625.684538][T31568]  sctp_setsockopt_bindx+0x1c2/0x2b0
[  625.684564][T31568]  sctp_setsockopt+0x834/0x12c0
[  625.684580][T31568]  ? sock_common_setsockopt+0x36/0xc0
[  625.684609][T31568]  ? __pfx_sock_common_setsockopt+0x10/0x10
[  625.684640][T31568]  do_sock_setsockopt+0x17c/0x1b0
[  625.684667][T31568]  __x64_sys_setsockopt+0x13f/0x1b0
[  625.684695][T31568]  do_syscall_64+0xec/0xf80
[  625.684715][T31568]  ? entry_SYSCALL_64_after_hwframe+0x77/0x7f
[  625.684734][T31568]  ? trace_irq_disable+0x37/0x100
[  625.684758][T31568]  ? clear_bhb_loop+0x60/0xb0
[  625.684781][T31568]  entry_SYSCALL_64_after_hwframe+0x77/0x7f
[  625.684800][T31568] RIP: 0033:0x7f8cc418f749
[  625.684817][T31568] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48
[  625.684835][T31568] RSP: 002b:00007f8cc5087038 EFLAGS: 00000246 ORIG_RAX: 0000000000000036
[  625.684857][T31568] RAX: ffffffffffffffda RBX: 00007f8cc43e5fa0 RCX: 00007f8cc418f749
[  625.684872][T31568] RDX: 0000000000000064 RSI: 0000000000000084 RDI: 0000000000000003
[  625.684884][T31568] RBP: 00007f8cc5087090 R08: 000000000000001c R09: 0000000000000000
[  625.684897][T31568] R10: 0000200000000380 R11: 0000000000000246 R12: 0000000000000001
[  625.684909][T31568] R13: 00007f8cc43e6038 R14: 00007f8cc43e5fa0 R15: 00007fff522b6508
[  625.684943][T31568]  </TASK>
[  625.944514][T31575] __nla_validate_parse: 10 callbacks suppressed
[  625.944532][T31575] netlink: 16 bytes leftover after parsing attributes in process `syz.5.7188'.
[  625.960938][T31575] netlink: 8 bytes leftover after parsing attributes in process `syz.5.7188'.
[  625.980352][T31575] netlink: 16 bytes leftover after parsing attributes in process `syz.5.7188'.
[  626.060790][T31529] chnl_net:caif_netlink_parms(): no params data found
[  626.159283][T31583] netlink: 8 bytes leftover after parsing attributes in process `syz.3.7189'.
[  626.195397][T31529] bridge0: port 1(bridge_slave_0) entered blocking state
[  626.202791][T31529] bridge0: port 1(bridge_slave_0) entered disabled state
[  626.231230][T31529] bridge_slave_0: entered allmulticast mode
[  626.251370][T31529] bridge_slave_0: entered promiscuous mode
[  626.271177][T31590] tipc: Enabled bearer <eth:syzkaller0>, priority 0
[  626.279931][T31529] bridge0: port 2(bridge_slave_1) entered blocking state
[  626.303058][T31529] bridge0: port 2(bridge_slave_1) entered disabled state
[  626.321561][T31529] bridge_slave_1: entered allmulticast mode
[  626.338713][T31529] bridge_slave_1: entered promiscuous mode
[  626.353726][T31583] syzkaller0: entered promiscuous mode
[  626.365455][T31583] syzkaller0: entered allmulticast mode
[  626.375852][ T5830] Bluetooth: hci3: command 0x0405 tx timeout
[  626.447515][T31583] tipc: Resetting bearer <eth:syzkaller0>
[  626.461587][T31592] openvswitch: netlink: Flow actions may not be safe on all matching packets.
[  626.480642][T31581] tipc: Resetting bearer <eth:syzkaller0>
[  626.502894][T31581] tipc: Disabling bearer <eth:syzkaller0>
[  626.516428][T31529] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link
[  626.532468][T31529] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link
[  626.628849][T31529] team0: Port device team_slave_0 added
[  626.656290][T31529] team0: Port device team_slave_1 added
[  626.773343][T31529] batman_adv: batadv0: Adding interface: batadv_slave_0
[  626.789789][T31529] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem.
[  626.873382][T31529] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active
[  626.899864][T31529] batman_adv: batadv0: Adding interface: batadv_slave_1
[  626.917641][T31529] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem.
[  626.968130][T31529] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active
[  627.019885][T31622] FAULT_INJECTION: forcing a failure.
[  627.019885][T31622] name fail_usercopy, interval 1, probability 0, space 0, times 1
[  627.059654][T31622] CPU: 0 UID: 0 PID: 31622 Comm: syz.3.7197 Not tainted syzkaller #0 PREEMPT(full) 
[  627.059683][T31622] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 10/25/2025
[  627.059697][T31622] Call Trace:
[  627.059705][T31622]  <TASK>
[  627.059713][T31622]  dump_stack_lvl+0xe8/0x150
[  627.059743][T31622]  should_fail_ex+0x414/0x560
[  627.059776][T31622]  _copy_to_user+0x31/0xb0
[  627.059801][T31622]  simple_read_from_buffer+0xe1/0x170
[  627.059830][T31622]  proc_fail_nth_read+0x1b3/0x220
[  627.059854][T31622]  ? __pfx_proc_fail_nth_read+0x10/0x10
[  627.059878][T31622]  ? rw_verify_area+0x2a6/0x4d0
[  627.059919][T31622]  ? __pfx_proc_fail_nth_read+0x10/0x10
[  627.059941][T31622]  vfs_read+0x200/0xa30
[  627.059957][T31622]  ? fdget_pos+0x247/0x320
[  627.059986][T31622]  ? __pfx___mutex_lock+0x10/0x10
[  627.060009][T31622]  ? __pfx_vfs_read+0x10/0x10
[  627.060028][T31622]  ? __fget_files+0x2a/0x420
[  627.060054][T31622]  ? __fget_files+0x3a0/0x420
[  627.060074][T31622]  ? __fget_files+0x2a/0x420
[  627.060106][T31622]  ksys_read+0x145/0x250
[  627.060126][T31622]  ? __pfx_ksys_read+0x10/0x10
[  627.060155][T31622]  do_syscall_64+0xec/0xf80
[  627.060175][T31622]  ? entry_SYSCALL_64_after_hwframe+0x77/0x7f
[  627.060194][T31622]  ? trace_irq_disable+0x37/0x100
[  627.060219][T31622]  ? clear_bhb_loop+0x60/0xb0
[  627.060243][T31622]  entry_SYSCALL_64_after_hwframe+0x77/0x7f
[  627.060262][T31622] RIP: 0033:0x7f7a8738e15c
[  627.060279][T31622] Code: ec 28 48 89 54 24 18 48 89 74 24 10 89 7c 24 08 e8 99 93 02 00 48 8b 54 24 18 48 8b 74 24 10 41 89 c0 8b 7c 24 08 31 c0 0f 05 <48> 3d 00 f0 ff ff 77 34 44 89 c7 48 89 44 24 08 e8 ef 93 02 00 48
[  627.060297][T31622] RSP: 002b:00007f7a881bc030 EFLAGS: 00000246 ORIG_RAX: 0000000000000000
[  627.060319][T31622] RAX: ffffffffffffffda RBX: 00007f7a875e5fa0 RCX: 00007f7a8738e15c
[  627.060334][T31622] RDX: 000000000000000f RSI: 00007f7a881bc0a0 RDI: 0000000000000004
[  627.060347][T31622] RBP: 00007f7a881bc090 R08: 0000000000000000 R09: 0000000000000000
[  627.060360][T31622] R10: 0000200000000380 R11: 0000000000000246 R12: 0000000000000001
[  627.060372][T31622] R13: 00007f7a875e6038 R14: 00007f7a875e5fa0 R15: 00007ffc860579a8
[  627.060406][T31622]  </TASK>
[  627.281787][ T5839] Bluetooth: hci2: command tx timeout
[  627.391044][T31632] ip6gre1: entered promiscuous mode
[  627.412687][T31632] ip6gre1: entered allmulticast mode
[  627.497652][T31529] hsr_slave_0: entered promiscuous mode
[  627.504749][T31529] hsr_slave_1: entered promiscuous mode
[  627.511795][T31529] debugfs: 'hsr0' already exists in 'hsr'
[  627.518407][T31529] Cannot create hsr debugfs directory
[  627.586148][T31641] sctp: [Deprecated]: syz.3.7205 (pid 31641) Use of struct sctp_assoc_value in delayed_ack socket option.
[  627.586148][T31641] Use struct sctp_sack_info instead
[  627.827610][T31657] netlink: 256 bytes leftover after parsing attributes in process `syz.5.7211'.
[  627.838523][T31529] netdevsim netdevsim6 netdevsim0: renamed from eth0
[  627.853171][T31529] netdevsim netdevsim6 netdevsim1: renamed from eth1
[  627.863258][T31657] netlink: 'syz.5.7211': attribute type 10 has an invalid length.
[  627.871977][T31658] netlink: 8 bytes leftover after parsing attributes in process `syz.0.7210'.
[  627.906318][T31657] A link change request failed with some changes committed already. Interface lo may have been left with an inconsistent configuration, please check.
[  627.936849][T31529] netdevsim netdevsim6 netdevsim2: renamed from eth2
[  627.970357][T31529] netdevsim netdevsim6 netdevsim3: renamed from eth3
[  628.028562][T31663] netlink: 24 bytes leftover after parsing attributes in process `syz.0.7212'.
[  628.234623][T31529] 8021q: adding VLAN 0 to HW filter on device bond0
[  628.316708][T31529] 8021q: adding VLAN 0 to HW filter on device team0
[  628.357805][ T1023] bridge0: port 1(bridge_slave_0) entered blocking state
[  628.365061][ T1023] bridge0: port 1(bridge_slave_0) entered forwarding state
[  628.431635][ T1023] bridge0: port 2(bridge_slave_1) entered blocking state
[  628.438865][ T1023] bridge0: port 2(bridge_slave_1) entered forwarding state
[  628.551108][T31683] syzkaller0: entered promiscuous mode
[  628.557058][T31683] syzkaller0: entered allmulticast mode
[  628.949252][T31717] netem: change failed
[  629.108475][T31726] tipc: Enabling of bearer <dth:sy> rejected, media not registered
[  629.127685][T31727] syzkaller0: entered promiscuous mode
[  629.136570][T31727] syzkaller0: entered allmulticast mode
[  629.157837][T31729] netlink: 36 bytes leftover after parsing attributes in process `syz.0.7231'.
[  629.217977][T31529] 8021q: adding VLAN 0 to HW filter on device batadv0
[  629.246845][T31731] netlink: 208 bytes leftover after parsing attributes in process `syz.3.7232'.
[  629.335810][ T5839] Bluetooth: hci2: command tx timeout
[  629.648478][T31761] IPVS: ip_vs_edit_dest(): lower threshold is higher than upper threshold
[  629.798632][T31529] veth0_vlan: entered promiscuous mode
[  629.809481][T31766] netlink: 8 bytes leftover after parsing attributes in process `syz.5.7241'.
[  629.835742][T31529] veth1_vlan: entered promiscuous mode
[  629.964544][T31529] veth0_macvtap: entered promiscuous mode
[  630.003788][T31778] netlink: 'syz.5.7249': attribute type 11 has an invalid length.
[  630.007915][T31529] veth1_macvtap: entered promiscuous mode
[  630.047530][T31780] openvswitch: netlink: Flow actions may not be safe on all matching packets.
[  630.076625][T31786] syzkaller0: entered promiscuous mode
[  630.082228][T31786] syzkaller0: entered allmulticast mode
[  630.250426][T31529] batman_adv: batadv0: Interface activated: batadv_slave_0
[  630.269343][T31529] batman_adv: batadv0: Interface activated: batadv_slave_1
[  630.309597][T14365] netdevsim netdevsim6 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0
[  630.347421][T14365] netdevsim netdevsim6 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0
[  630.365414][T14365] netdevsim netdevsim6 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0
[  630.418063][T14365] netdevsim netdevsim6 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0
[  630.541820][T31802] syzkaller0: entered promiscuous mode
[  630.552504][T31802] syzkaller0: entered allmulticast mode
[  630.612121][T31802] tipc: Enabled bearer <eth:syzkaller0>, priority 0
[  630.630154][T31802] tipc: Resetting bearer <eth:syzkaller0>
[  630.661620][T31801] tipc: Resetting bearer <eth:syzkaller0>
[  630.719894][T31801] tipc: Disabling bearer <eth:syzkaller0>
[  630.774609][T31815] team0: Device ip6gre2 is of different type
[  630.867991][T14377] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50
[  630.893069][T14377] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50
[  630.972133][T31826] tipc: Enabling of bearer <eth:syzkaller0> rejected, failed to enable media
[  630.987276][T14377] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50
[  630.997803][T14377] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50
[  631.399729][T31858] netlink: 'syz.5.7270': attribute type 11 has an invalid length.
[  631.423783][ T5839] Bluetooth: hci2: command tx timeout
[  631.433270][T31858] openvswitch: netlink: IP tunnel dst address not specified
[  631.442095][T31855] __nla_validate_parse: 4 callbacks suppressed
[  631.442107][T31855] netlink: 4 bytes leftover after parsing attributes in process `syz.1.7269'.
[  631.470043][T31861] syzkaller0: entered promiscuous mode
[  631.476165][T31861] syzkaller0: entered allmulticast mode
[  631.634407][T31868] netlink: 'syz.0.7275': attribute type 21 has an invalid length.
[  631.727535][T31877] netlink: 12 bytes leftover after parsing attributes in process `syz.5.7278'.
[  631.761683][T31878] openvswitch: netlink: Flow actions may not be safe on all matching packets.
[  631.909003][T31868] netlink: 4 bytes leftover after parsing attributes in process `syz.0.7275'.
[  631.919277][T31872] tipc: Enabled bearer <eth:syzkaller0>, priority 0
[  631.938323][T31882] netlink: 36 bytes leftover after parsing attributes in process `syz.6.7277'.
[  631.981039][T31878] bond0: (slave macvlan2): Error -98 calling set_mac_address
[  632.238666][T31892] netlink: 'syz.6.7282': attribute type 23 has an invalid length.
[  632.314169][T31900] netlink: 256 bytes leftover after parsing attributes in process `syz.0.7284'.
[  632.329757][T31892] netlink: 4 bytes leftover after parsing attributes in process `syz.6.7282'.
[  632.387562][T31905] netlink: 52 bytes leftover after parsing attributes in process `syz.3.7286'.
[  632.505440][T31912] netlink: 52 bytes leftover after parsing attributes in process `syz.3.7286'.
[  632.537641][T31908] netlink: 'syz.0.7288': attribute type 7 has an invalid length.
[  632.546165][T31908] netlink: 'syz.0.7288': attribute type 7 has an invalid length.
[  632.590570][T31916] ip6gre1: entered allmulticast mode
[  632.608440][T31917] tipc: Started in network mode
[  632.613346][T31917] tipc: Node identity ce291501de9f, cluster identity 4711
[  632.633423][T31917] tipc: Enabled bearer <eth:syzkaller0>, priority 0
[  632.690153][T31917] tipc: Disabling bearer <eth:syzkaller0>
[  632.750520][T31928] bridge0: entered allmulticast mode
[  632.818482][T31934] syzkaller0: entered promiscuous mode
[  632.823995][T31934] syzkaller0: entered allmulticast mode
[  633.097044][T31958] xt_TPROXY: Can be used only with -p tcp or -p udp
[  633.178538][T31967] netlink: 'syz.3.7305': attribute type 1 has an invalid length.
[  633.202281][T31967] netlink: 24 bytes leftover after parsing attributes in process `syz.3.7305'.
[  633.227355][T31967] netlink: 80 bytes leftover after parsing attributes in process `syz.3.7305'.
[  633.334446][T31975] IPVS: set_ctl: invalid protocol: 22 172.20.20.187:20001
[  633.496322][ T5839] Bluetooth: hci2: command tx timeout
[  634.012266][T32013] openvswitch: netlink: Flow key attr not present in new flow.
[  634.477233][T32018] IPVS: Error connecting to the multicast addr
[  634.720945][T32037] openvswitch: netlink: Unexpected mask (mask=840, allowed=10048)
[  635.682755][ T3741] netdevsim netdevsim1 netdevsim0: set [0, 0] type 1 family 0 port 8472 - 0
[  635.700104][ T3741] netdevsim netdevsim1 netdevsim1: set [0, 0] type 1 family 0 port 8472 - 0
[  635.724351][ T3741] netdevsim netdevsim1 netdevsim2: set [0, 0] type 1 family 0 port 8472 - 0
[  635.737629][ T3741] netdevsim netdevsim1 netdevsim3: set [0, 0] type 1 family 0 port 8472 - 0
[  636.127118][T32117] Cannot find add_set index 2 as target
[  636.207362][T32130] netlink: 'syz.6.7350': attribute type 10 has an invalid length.
[  636.268669][T32130] team0: Port device dummy0 added
[  636.477263][T32145] bond9: entered promiscuous mode
[  636.482347][T32145] bond9: entered allmulticast mode
[  636.488744][T32145] 8021q: adding VLAN 0 to HW filter on device bond9
[  636.625815][ T5830] Bluetooth: hci6: command 0x0406 tx timeout
[  636.661264][T32164] __nla_validate_parse: 14 callbacks suppressed
[  636.661282][T32164] netlink: 68 bytes leftover after parsing attributes in process `syz.1.7361'.
[  636.884930][T32176] x_tables: ip_tables: DNAT target: used from hooks POSTROUTING, but only usable from PREROUTING/OUTPUT
[  636.916134][T32176] �
: renamed from veth1_vlan (while UP)
[  636.975408][T32183] syzkaller0: entered promiscuous mode
[  636.980967][T32183] syzkaller0: entered allmulticast mode
[  637.062888][T32190] netlink: 'syz.6.7369': attribute type 9 has an invalid length.
[  637.071457][T32190] netlink: 'syz.6.7369': attribute type 11 has an invalid length.
[  637.080711][T32190] netlink: 'syz.6.7369': attribute type 12 has an invalid length.
[  637.089538][T32190] netlink: 210020 bytes leftover after parsing attributes in process `syz.6.7369'.
[  637.129262][T32190] netlink: 4 bytes leftover after parsing attributes in process `syz.6.7369'.
[  637.148168][T32194] netlink: 16 bytes leftover after parsing attributes in process `syz.5.7368'.
[  637.381787][T32186] team_slave_0: left promiscuous mode
[  637.389294][T32186] team0 (unregistering): Port device team_slave_0 removed
[  637.397089][T32186] team_slave_1: left promiscuous mode
[  637.403535][T32186] team0 (unregistering): Port device team_slave_1 removed
[  637.411244][T32186] dummy0: left promiscuous mode
[  637.418668][T32186] team0 (unregistering): Port device dummy0 removed
[  637.579752][T32214] netlink: 12 bytes leftover after parsing attributes in process `syz.6.7374'.
[  637.644246][T32214] netlink: 92 bytes leftover after parsing attributes in process `syz.6.7374'.
[  637.798150][T32229] netlink: 8 bytes leftover after parsing attributes in process `syz.6.7381'.
[  637.995379][T32247] netlink: 'syz.1.7383': attribute type 1 has an invalid length.
[  638.023504][T32247] netlink: 8 bytes leftover after parsing attributes in process `syz.1.7383'.
[  638.034253][T32247] netlink: 4 bytes leftover after parsing attributes in process `syz.1.7383'.
[  638.043479][T32247] netlink: 'syz.1.7383': attribute type 2 has an invalid length.
[  638.052910][T32247] netlink: 'syz.1.7383': attribute type 2 has an invalid length.
[  638.061298][T32247] netlink: 'syz.1.7383': attribute type 2 has an invalid length.
[  638.096891][T32257] netlink: 72 bytes leftover after parsing attributes in process `syz.3.7385'.
[  638.158342][    T9] IPVS: starting estimator thread 0...
[  638.257595][T32269] x_tables: unsorted entry at hook 3
[  638.265937][T32260] IPVS: using max 33 ests per chain, 79200 per kthread
[  638.502038][T32278] veth5: entered allmulticast mode
[  638.517735][T32280] tipc: Enabling of bearer <eth:syzkaller0> rejected, already enabled
[  638.579639][T32285] IPv6: NLM_F_REPLACE set, but no existing node found!
[  638.673451][T32285] vlan2: entered allmulticast mode
[  638.884978][T32302] netlink: 'syz.6.7400': attribute type 83 has an invalid length.
[  638.932731][T32302] netlink: 'syz.6.7400': attribute type 83 has an invalid length.
[  639.179146][T32327] syzkaller0: entered promiscuous mode
[  639.184760][T32327] syzkaller0: entered allmulticast mode
[  639.249716][T32329] bond5: entered promiscuous mode
[  639.257766][T32329] 8021q: adding VLAN 0 to HW filter on device bond5
[  639.310132][T32338] bond5: (slave xfrm1): refused to change device type
[  639.325825][T32340] tipc: Enabled bearer <eth:syzkaller0>, priority 0
[  639.350436][T32327] tipc: Resetting bearer <eth:syzkaller0>
[  639.422448][T32326] tipc: Resetting bearer <eth:syzkaller0>
[  639.463659][T32326] tipc: Disabling bearer <eth:syzkaller0>
[  640.156370][T32389] netlink: 'syz.6.7423': attribute type 25 has an invalid length.
[  640.199666][ T6059] netdevsim netdevsim6 netdevsim0: set [0, 0] type 1 family 0 port 8472 - 0
[  640.209659][T32389] netlink: 'syz.6.7423': attribute type 25 has an invalid length.
[  640.225720][ T6059] netdevsim netdevsim6 netdevsim1: set [0, 0] type 1 family 0 port 8472 - 0
[  640.242917][ T6059] netdevsim netdevsim6 netdevsim2: set [0, 0] type 1 family 0 port 8472 - 0
[  640.283169][ T6059] netdevsim netdevsim6 netdevsim3: set [0, 0] type 1 family 0 port 8472 - 0
[  640.318951][T32367] syzkaller1: tun_chr_ioctl cmd 1074025677
[  640.324832][T32367] syzkaller1: Linktype set failed because interface is up
[  640.338120][ T5898] syzkaller1: tun_net_xmit 90
[  640.808397][T32426] netlink: 'syz.0.7437': attribute type 3 has an invalid length.
[  641.093901][T32444] netlink: 'syz.1.7443': attribute type 5 has an invalid length.
[  641.107148][T32446] openvswitch: netlink: Flow actions may not be safe on all matching packets.
[  641.209000][T32455] netlink: 'syz.6.7448': attribute type 1 has an invalid length.
[  641.280702][T32463] ipt_ECN: cannot use operation on non-tcp rule
[  641.294820][T32455] 8021q: adding VLAN 0 to HW filter on device bond1
[  641.344624][T32462] bond1: (slave veth0_to_bond): making interface the new active one
[  641.386757][T32462] bond1: (slave veth0_to_bond): Enslaving as an active interface with an up link
[  641.473611][T32462] 8021q: adding VLAN 0 to HW filter on device bond2
[  641.516909][T32462] bond1: (slave bond2): Enslaving as an active interface with a down link
[  641.607076][T32475] 8021q: adding VLAN 0 to HW filter on device bond3
[  641.647590][T32475] bond1: (slave bond3): Enslaving as an active interface with a down link
[  641.749343][T32487] syzkaller0: entered promiscuous mode
[  641.754847][T32487] syzkaller0: entered allmulticast mode
[  642.004092][T32455] netlink: 'syz.6.7448': attribute type 1 has an invalid length.
[  642.031982][T32455] __nla_validate_parse: 19 callbacks suppressed
[  642.032001][T32455] netlink: 224 bytes leftover after parsing attributes in process `syz.6.7448'.
[  646.855437][ T5830] Bluetooth: hci5: command 0x0406 tx timeout
[  651.975656][ T5830] Bluetooth: hci4: command 0x0406 tx timeout
[  685.735812][    C1] ip6_tunnel: ip6gretap0 xmit: Local address not yet configured!
[  685.744220][ T1301] aoe: packet could not be sent on bond0.  consider increasing tx_queue_len
[  685.754730][ T1301] clip:clip_start_xmit: skb_dst(skb) == NULL
[  708.295512][ T5839] Bluetooth: hci0: command 0x0401 tx timeout
[  728.538138][T32520] bond0: (slave rose0): Error: Device is in use and cannot be enslaved
[  728.580512][T32523] syzkaller0: entered promiscuous mode
[  728.595242][T32523] syzkaller0: entered allmulticast mode
[  728.608041][T32535] syzkaller0: entered promiscuous mode
[  728.645167][T32535] syzkaller0: entered allmulticast mode
[  728.797070][T32540] syzkaller0: entered promiscuous mode
[  728.804004][T32540] syzkaller0: entered allmulticast mode
[  728.843759][T32540] tipc: Enabled bearer <eth:syzkaller0>, priority 0
[  728.876975][T32540] tipc: Resetting bearer <eth:syzkaller0>
[  728.891051][T32539] tipc: Resetting bearer <eth:syzkaller0>
[  728.947263][T32539] tipc: Disabling bearer <eth:syzkaller0>
[  728.973391][T32554] netlink: 'syz.3.7474': attribute type 17 has an invalid length.
[  728.993068][T32554] netlink: 4 bytes leftover after parsing attributes in process `syz.3.7474'.
[  729.026785][T32552] netlink: 'syz.1.7475': attribute type 39 has an invalid length.
[  729.043211][T32554] netlink: 28 bytes leftover after parsing attributes in process `syz.3.7474'.
[  729.533778][T32600] syzkaller0: entered promiscuous mode
[  729.540440][T32600] syzkaller0: entered allmulticast mode
[  729.550783][T32600] tipc: Enabled bearer <eth:syzkaller0>, priority 0
[  729.574804][T32600] tipc: Resetting bearer <eth:syzkaller0>
[  729.595885][T32599] tipc: Resetting bearer <eth:syzkaller0>
[  729.607293][T32598] can: request_module (can-proto-0) failed.
[  729.686422][T32599] tipc: Disabling bearer <eth:syzkaller0>
[  729.855369][T32621] xt_CT: You must specify a L4 protocol and not use inversions on it
[  729.889093][T32625] netlink: 16 bytes leftover after parsing attributes in process `syz.1.7497'.
[  729.904312][T32621] netlink: 'syz.6.7494': attribute type 2 has an invalid length.
[  729.969136][T32628] netlink: 'syz.5.7498': attribute type 1 has an invalid length.
[  730.078830][T32628] bond17: entered promiscuous mode
[  730.084610][T32628] 8021q: adding VLAN 0 to HW filter on device bond17
[  730.092305][T32639] ip6tnl0: Caught tx_queue_len zero misconfig
[  730.108530][T32635] A link change request failed with some changes committed already. Interface lo may have been left with an inconsistent configuration, please check.
[  730.163849][T32637] A link change request failed with some changes committed already. Interface lo may have been left with an inconsistent configuration, please check.
[  730.206389][T32643] netlink: 28 bytes leftover after parsing attributes in process `syz.1.7502'.
[  730.244190][T32642] bond17: (slave bridge5): making interface the new active one
[  730.265973][T32642] bridge5: entered promiscuous mode
[  730.282873][T32642] bond17: (slave bridge5): Enslaving as an active interface with an up link
[  730.433193][T32661] netlink: 'syz.6.7508': attribute type 29 has an invalid length.
[  730.454110][T32661] netlink: 'syz.6.7508': attribute type 29 has an invalid length.
[  730.466021][T32661] netlink: 'syz.6.7508': attribute type 29 has an invalid length.
[  730.474416][T32661] netlink: 'syz.6.7508': attribute type 29 has an invalid length.
[  730.487090][T32661] netlink: 'syz.6.7508': attribute type 29 has an invalid length.
[  730.572533][T32661] netlink: 'syz.6.7508': attribute type 29 has an invalid length.
[  730.653909][T32680] ip6t_REJECT: TCP_RESET illegal for non-tcp
[  730.690195][T32680] netlink: 64138 bytes leftover after parsing attributes in process `syz.1.7513'.
[  730.732262][T32686] netlink: 12 bytes leftover after parsing attributes in process `syz.6.7514'.
[  730.774088][T32680] tipc: Enabling of bearer <eth:syzkaller0> rejected, already enabled
[  730.785919][T32679] tipc: Enabling of bearer <eth:syzkaller0> rejected, already enabled
[  730.937620][T32705] netlink: 12 bytes leftover after parsing attributes in process `syz.1.7521'.
[  730.975606][T32704] netlink: 36 bytes leftover after parsing attributes in process `syz.1.7521'.
[  731.005322][T32705] netlink: 36 bytes leftover after parsing attributes in process `syz.1.7521'.
[  731.394668][T32742] tipc: Enabling of bearer <eth:syzkaller0> rejected, already enabled
[  731.437896][T32745] netlink: 96 bytes leftover after parsing attributes in process `syz.5.7530'.
[  731.496661][T32745] vlan4: entered allmulticast mode
[  731.506598][T32745] gretap0: entered allmulticast mode
[  731.759594][T32763] TCP: request_sock_TCPv6: Possible SYN flooding on port [::]:20002. Sending cookies.
[  731.812948][T32765] tunl0: Caught tx_queue_len zero misconfig
[  731.868270][  T304] ip6_vti0: entered promiscuous mode
[  732.095679][  T317] geneve0: entered promiscuous mode
[  732.109432][  T317] team0: Port device geneve0 added
[  732.141199][  T314] syzkaller0: entered promiscuous mode
[  732.148474][  T314] syzkaller0: entered allmulticast mode
[  732.162045][  T314] tipc: Enabled bearer <eth:syzkaller0>, priority 0
[  732.171881][  T314] tipc: Resetting bearer <eth:syzkaller0>
[  732.199618][  T313] tipc: Resetting bearer <eth:syzkaller0>
[  732.236920][  T313] tipc: Disabling bearer <eth:syzkaller0>
[  732.277540][  T328] lo: Caught tx_queue_len zero misconfig
[  732.876549][  T371] openvswitch: netlink: Multiple metadata blocks provided
[  732.956631][  T379] nbd: must specify a size in bytes for the device
[  732.963729][  T379] block nbd3: NBD_DISCONNECT
[  732.968997][  T379] block nbd3: Send disconnect failed -32
[  732.974772][  T379] block nbd3: shutting down sockets
[  733.397688][  T400] team_slave_0: Caught tx_queue_len zero misconfig
[  733.927565][  T450] vlan0: entered promiscuous mode
[  733.934181][  T450] bridge0: entered promiscuous mode
[  734.308835][  T477] SET target dimension over the limit!
[  734.481559][  T490] __nla_validate_parse: 12 callbacks suppressed
[  734.481579][  T490] netlink: 212 bytes leftover after parsing attributes in process `syz.6.7599'.
[  734.546222][  T494] netlink: 4 bytes leftover after parsing attributes in process `syz.5.7601'.
[  734.604599][  T497] xt_CT: You must specify a L4 protocol and not use inversions on it
[  734.620674][  T497] validate_nla: 4 callbacks suppressed
[  734.620735][  T497] netlink: 'syz.1.7602': attribute type 2 has an invalid length.
[  734.674634][  T505] tipc: Enabled bearer <eth:syzkaller0>, priority 0
[  734.691462][  T506] tipc: Enabling of bearer <eth:syzkaller0> rejected, already enabled
[  734.705998][  T505] syzkaller0: entered promiscuous mode
[  734.711514][  T505] syzkaller0: entered allmulticast mode
[  734.737692][  T505] sch_tbf: burst 127 is lower than device syzkaller0 mtu (1514) !
[  734.763215][  T501] netlink: 8 bytes leftover after parsing attributes in process `syz.6.7605'.
[  734.804062][  T506] tipc: Resetting bearer <eth:syzkaller0>
[  734.811929][  T513] netlink: 72 bytes leftover after parsing attributes in process `syz.5.7607'.
[  734.821589][  T513] netlink: 72 bytes leftover after parsing attributes in process `syz.5.7607'.
[  734.831532][  T504] tipc: Resetting bearer <eth:syzkaller0>
[  734.865456][  T504] tipc: Disabling bearer <eth:syzkaller0>
[  734.894125][  T513] veth11: entered allmulticast mode
[  735.742450][  T571] netlink: 8 bytes leftover after parsing attributes in process `syz.5.7630'.
[  735.759617][  T575] vxcan1: left allmulticast mode
[  735.776470][  T575] macvtap0: left allmulticast mode
[  735.806653][  T575] ip6gre1: left allmulticast mode
[  735.826476][  T587] netlink: 8 bytes leftover after parsing attributes in process `syz.0.7631'.
[  735.834524][  T575] veth5: left allmulticast mode
[  735.890791][  T575] netlink: 8 bytes leftover after parsing attributes in process `syz.0.7631'.
[  735.939296][  T587] netlink: 4 bytes leftover after parsing attributes in process `syz.0.7631'.
[  735.960460][  T575] netlink: 4 bytes leftover after parsing attributes in process `syz.0.7631'.
[  736.072853][  T601] IPVS: set_ctl: invalid protocol: 22 224.0.0.1:20002
[  736.237346][  T616] TCP: request_sock_TCPv6: Possible SYN flooding on port [::]:20002. Sending cookies.
[  736.337999][  T623] openvswitch: netlink: ERSPAN option length err (len 256, max 255).
[  736.515656][  T634] bridge6: port 1(veth13) entered blocking state
[  736.522209][  T634] bridge6: port 1(veth13) entered disabled state
[  736.530135][  T634] veth13: entered allmulticast mode
[  736.541258][  T634] veth13: entered promiscuous mode
[  736.554494][  T640] bridge6: port 2(veth0_to_bond) entered blocking state
[  736.562957][  T640] bridge6: port 2(veth0_to_bond) entered disabled state
[  736.570799][  T640] veth0_to_bond: entered allmulticast mode
[  736.578915][  T640] veth0_to_bond: entered promiscuous mode
[  736.602112][  T636] netlink: 'syz.0.7648': attribute type 10 has an invalid length.
[  736.619101][  T636] 8021q: adding VLAN 0 to HW filter on device batadv0
[  736.649153][  T636] batadv0: entered promiscuous mode
[  736.659641][  T636] bond0: (slave batadv0): Enslaving as an active interface with an up link
[  736.773093][  T648] bridge0: entered allmulticast mode
[  736.959987][  T661] netdevsim netdevsim6: loading /lib/firmware/. failed with error -22
[  736.970246][  T661] netdevsim netdevsim6: Direct firmware load for . failed with error -22
[  736.979982][  T661] netdevsim netdevsim6: Falling back to sysfs fallback for: .
[  737.274243][  T682] xt_hashlimit: Unknown mode mask C4, kernel too old?
[  737.314343][  T685] netlink: 'syz.0.7665': attribute type 1 has an invalid length.
[  737.429349][  T693] netlink: 'syz.3.7667': attribute type 1 has an invalid length.
[  737.475504][  T693] bond11: entered promiscuous mode
[  737.481224][  T693] 8021q: adding VLAN 0 to HW filter on device bond11
[  737.500823][  T697] netlink: 'syz.1.7668': attribute type 39 has an invalid length.
[  737.520916][  T694] bond11: (slave bridge5): making interface the new active one
[  737.529174][  T694] bridge5: entered promiscuous mode
[  737.536623][  T694] bond11: (slave bridge5): Enslaving as an active interface with an up link
[  737.554704][  T693] bond11: (slave bridge6): Enslaving as a backup interface with an up link
[  737.638061][  T685] gretap2: entered promiscuous mode
[  737.649206][  T701] sit0: entered promiscuous mode
[  737.669519][  T701] netlink: 'syz.1.7668': attribute type 1 has an invalid length.
[  737.690852][  T702] vcan1: entered promiscuous mode
[  737.700243][  T702] vcan1: entered allmulticast mode
[  738.049746][  T716] A link change request failed with some changes committed already. Interface lo may have been left with an inconsistent configuration, please check.
[  738.506103][  T747] ipvlan2: entered allmulticast mode
[  738.511830][  T747] batadv_slave_1: entered allmulticast mode
[  738.532124][  T747] batman_adv: batadv0: Adding interface: ipvlan2
[  738.563050][  T755] 0: reclassify loop, rule prio 0, protocol 700
[  738.574324][  T747] batman_adv: batadv0: The MTU of interface ipvlan2 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem.
[  738.640857][  T747] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1
[  738.651968][  T747] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems!
[  738.667098][  T747] batman_adv: batadv0: Interface activated: ipvlan2
[  738.880603][  T766] "syz.5.7688" (766) uses obsolete ecb(arc4) skcipher
[  739.093322][  T778] xt_AUDIT: Audit type out of range (valid range: 0..2)
[  739.157747][  T784] delete_channel: no stack
[  739.162103][  T782] netlink: 'syz.6.7692': attribute type 1 has an invalid length.
[  739.170711][  T782] netlink: 'syz.6.7692': attribute type 2 has an invalid length.
[  739.201164][  T782] netlink: 'syz.6.7692': attribute type 1 has an invalid length.
[  739.961635][  T834] __nla_validate_parse: 17 callbacks suppressed
[  739.961655][  T834] netlink: 48 bytes leftover after parsing attributes in process `syz.5.7705'.
[  739.997583][  T825] netlink: 28 bytes leftover after parsing attributes in process `syz.0.7708'.
[  740.031111][  T825] netlink: 28 bytes leftover after parsing attributes in process `syz.0.7708'.
[  740.065292][  T825] netlink: 28 bytes leftover after parsing attributes in process `syz.0.7708'.
[  740.082354][  T825] netlink: 28 bytes leftover after parsing attributes in process `syz.0.7708'.
[  740.145919][  T840] syzkaller0: entered promiscuous mode
[  740.162352][  T840] syzkaller0: entered allmulticast mode
[  740.187181][  T840] bridge0: port 3(batadv1) entered blocking state
[  740.194025][  T840] bridge0: port 3(batadv1) entered disabled state
[  740.210925][  T840] batadv1: entered allmulticast mode
[  740.219066][  T840] batadv1: entered promiscuous mode
[  740.227964][  T851] netlink: 8 bytes leftover after parsing attributes in process `syz.6.7712'.
[  740.240749][  T849] vxcan1: tx drop: invalid da for name 0x0000000000000003
[  740.256756][  T851] netlink: 'syz.6.7712': attribute type 1 has an invalid length.
[  740.264692][  T851] netlink: 224 bytes leftover after parsing attributes in process `syz.6.7712'.
[  740.282404][  T849] IPv6: sit2: Disabled Multicast RS
[  740.293655][  T849] sit2: entered allmulticast mode
[  740.393876][  T847] tipc: Enabled bearer <eth:syzkaller0>, priority 0
[  740.404521][  T847] tipc: Resetting bearer <eth:syzkaller0>
[  740.426844][  T846] tipc: Disabling bearer <eth:syzkaller0>
[  740.467390][  T864] netlink: 'syz.0.7721': attribute type 1 has an invalid length.
[  740.475826][  T864] netlink: 'syz.0.7721': attribute type 11 has an invalid length.
[  740.486236][  T864] netlink: 224 bytes leftover after parsing attributes in process `syz.0.7721'.
[  740.686052][ T1023] batman_adv: batadv1: No IGMP Querier present - multicast optimizations disabled
[  740.696538][ T1023] batman_adv: batadv1: No MLD Querier present - multicast optimizations disabled
[  740.808201][  T879] netlink: 24 bytes leftover after parsing attributes in process `syz.3.7727'.
[  740.859655][  T887] netlink: 4 bytes leftover after parsing attributes in process `syz.3.7727'.
[  740.998968][  T897] infiniband syz1: RDMA CMA: cma_listen_on_dev, error -98
[  741.027753][  T896] syzkaller0: entered promiscuous mode
[  741.042203][  T896] syzkaller0: entered allmulticast mode
[  741.127609][  T896] tipc: Enabled bearer <eth:syzkaller0>, priority 0
[  741.177131][  T896] tipc: Resetting bearer <eth:syzkaller0>
[  741.217360][  T894] tipc: Resetting bearer <eth:syzkaller0>
[  741.267467][  T894] tipc: Disabling bearer <eth:syzkaller0>
[  741.430299][  T926] veth0_to_team: entered promiscuous mode
[  741.473555][  T925] bond5 (unregistering): Released all slaves
[  741.490594][    C1] vxcan1: j1939_tp_rxtimer: 0xffff88807891f400: rx timeout, send abort
[  741.501994][    C1] vxcan1: j1939_xtp_rx_abort_one: 0xffff88807891f400: 0x40000: (3) A timeout occurred and this is the connection abort to close the session.
[  742.693545][ T1014] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface
[  742.737784][ T1014] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface
[  742.772076][ T1014] bond0 (unregistering): (slave bridge_slave_1): Releasing backup interface
[  742.807559][ T1014] bond0 (unregistering): Released all slaves
[  742.948093][ T1036] syzkaller0: entered promiscuous mode
[  742.969238][ T1036] syzkaller0: entered allmulticast mode
[  743.296637][ T1058] dvmrp6: entered allmulticast mode
[  743.306591][ T1064] openvswitch: netlink: IPv4 tunnel dst address is zero
[  743.758806][ T1087] 8021q: VLANs not supported on ip_vti0
[  743.848734][ T1097] netlink: 'syz.5.7788': attribute type 9 has an invalid length.
[  743.856803][ T1097] netlink: 'syz.5.7788': attribute type 11 has an invalid length.
[  743.877499][ T1097] netlink: 'syz.5.7788': attribute type 12 has an invalid length.
[  744.164257][ T1112] tipc: Enabling of bearer <eth:syzkaller0> rejected, already enabled
[  744.212605][ T1118] openvswitch: netlink: Tunnel attr 31 out of range max 16
[  744.588059][ T1151] netlink: 'syz.5.7806': attribute type 1 has an invalid length.
[  744.611458][ T1149] netlink: 'syz.0.7804': attribute type 9 has an invalid length.
[  744.627948][ T1149] netlink: 'syz.0.7804': attribute type 6 has an invalid length.
[  744.690846][ T1157] netlink: 'syz.1.7808': attribute type 3 has an invalid length.
[  744.901401][ T1170] IPv6: sit2: Disabled Multicast RS
[  744.912975][ T1170] sit2: entered allmulticast mode
[  745.039273][ T1181] openvswitch: netlink: Flow key attr not present in new flow.
[  745.604824][ T1235] __nla_validate_parse: 21 callbacks suppressed
[  745.604838][ T1235] netlink: 104 bytes leftover after parsing attributes in process `syz.5.7828'.
[  746.191692][ T1249] netlink: 8 bytes leftover after parsing attributes in process `syz.6.7831'.
[  746.234301][ T1249] netlink: 'syz.6.7831': attribute type 5 has an invalid length.
[  746.286796][ T1249] netlink: 20 bytes leftover after parsing attributes in process `syz.6.7831'.
[  746.347737][ T1249] geneve2: entered promiscuous mode
[  746.367468][ T1249] geneve2: entered allmulticast mode
[  746.384839][ T3741] netdevsim netdevsim6 netdevsim0: set [1, 1] type 2 family 0 port 256 - 0
[  746.410350][ T3741] netdevsim netdevsim6 netdevsim1: set [1, 1] type 2 family 0 port 256 - 0
[  746.440135][ T3741] netdevsim netdevsim6 netdevsim2: set [1, 1] type 2 family 0 port 256 - 0
[  746.466046][ T3741] netdevsim netdevsim6 netdevsim3: set [1, 1] type 2 family 0 port 256 - 0
[  746.798787][ T1308] sock: sock_timestamping_bind_phc: sock not bind to device
[  746.838527][ T1310] netlink: 72 bytes leftover after parsing attributes in process `syz.0.7848'.
[  746.857128][ T1307] netlink: 56 bytes leftover after parsing attributes in process `syz.3.7847'.
[  747.187824][ T1301] aoe: packet could not be sent on bond0.  consider increasing tx_queue_len
[  747.198630][ T1301] clip:clip_start_xmit: skb_dst(skb) == NULL
[  747.272335][ T1332] netlink: 256 bytes leftover after parsing attributes in process `syz.6.7855'.
[  747.305202][ T1332] netlink: 'syz.6.7855': attribute type 9 has an invalid length.
[  747.470504][ T1344] syzkaller0: entered promiscuous mode
[  747.476666][ T1344] syzkaller0: entered allmulticast mode
[  747.535629][ T1344] netlink: 16 bytes leftover after parsing attributes in process `syz.6.7858'.
[  747.616576][ T1344] tipc: Enabled bearer <eth:syzkaller0>, priority 0
[  747.646157][ T1344] tipc: Resetting bearer <eth:syzkaller0>
[  747.678851][ T1341] tipc: Resetting bearer <eth:syzkaller0>
[  747.708763][ T1362] netlink: 'syz.1.7861': attribute type 2 has an invalid length.
[  747.759656][ T1341] tipc: Disabling bearer <eth:syzkaller0>
[  747.911275][ T1379] netlink: 36 bytes leftover after parsing attributes in process `syz.0.7866'.
[  748.149335][ T1386] veth3: entered allmulticast mode
[  748.186087][ T1391] netlink: 'syz.5.7871': attribute type 8 has an invalid length.
[  748.246925][ T1394] netlink: 11562 bytes leftover after parsing attributes in process `syz.6.7872'.
[  748.373994][ T1404] netlink: 28 bytes leftover after parsing attributes in process `syz.6.7875'.
[  748.438019][ T1404] netlink: 'syz.6.7875': attribute type 7 has an invalid length.
[  748.465688][ T1404] netlink: 'syz.6.7875': attribute type 8 has an invalid length.
[  748.534862][ T1411] wlan0 speed is unknown, defaulting to 1000
[  748.574430][ T1411] lo speed is unknown, defaulting to 1000
[  749.260477][ T5839] Bluetooth: hci2: command 0x0406 tx timeout
[  749.548680][ T1468] openvswitch: netlink: Flow actions attr not present in new flow.
[  749.998652][ T1483] bond12: option arp_interval: mode dependency failed, not supported in mode balance-tlb(5)
[  750.023512][ T1483] bond12 (unregistering): Released all slaves
[  750.186234][ T1509] xt_addrtype: ipv6 BLACKHOLE matching not supported
[  750.210410][ T1511] xt_addrtype: ipv6 BLACKHOLE matching not supported
[  750.370744][ T1526] netlink: 'syz.3.7910': attribute type 3 has an invalid length.
[  750.882765][ T1538] __nla_validate_parse: 16 callbacks suppressed
[  750.882786][ T1538] netlink: 8 bytes leftover after parsing attributes in process `syz.1.7913'.
[  750.926156][ T1538] netlink: 'syz.1.7913': attribute type 7 has an invalid length.
[  750.939737][ T1543] netlink: 'syz.3.7916': attribute type 2 has an invalid length.
[  750.949209][ T1538] netlink: 8 bytes leftover after parsing attributes in process `syz.1.7913'.
[  750.955216][ T1541] netlink: 4 bytes leftover after parsing attributes in process `syz.6.7915'.
[  750.966239][ T1538] netlink: 'syz.1.7913': attribute type 7 has an invalid length.
[  750.969517][ T1541] team1 (uninitialized): Failed to send options change via netlink (err -105)
[  751.004607][ T1547] netlink: 8 bytes leftover after parsing attributes in process `syz.5.7917'.
[  751.017740][ T1548] netlink: 80 bytes leftover after parsing attributes in process `syz.1.7913'.
[  751.039078][ T1547] netlink: 8 bytes leftover after parsing attributes in process `syz.5.7917'.
[  751.040308][ T1541] team1: entered promiscuous mode
[  751.059603][ T1547] netlink: 8 bytes leftover after parsing attributes in process `syz.5.7917'.
[  751.073446][ T1541] team1: entered allmulticast mode
[  751.202706][ T1559] netlink: 104 bytes leftover after parsing attributes in process `syz.3.7920'.
[  751.348571][ T1571] xt_recent: Unsupported userspace flags (000000b1)
[  751.399618][ T1577] netlink: 300 bytes leftover after parsing attributes in process `syz.0.7926'.
[  751.556874][ T1584] netlink: 'syz.0.7929': attribute type 2 has an invalid length.
[  751.570701][ T1587] netlink: 'syz.1.7930': attribute type 4 has an invalid length.
[  751.595154][ T1584] netlink: 84 bytes leftover after parsing attributes in process `syz.0.7929'.
[  751.685970][ T1589] bond12: option arp_interval: mode dependency failed, not supported in mode balance-tlb(5)
[  751.738853][ T1589] bond12 (unregistering): Released all slaves
[  751.872766][ T1602] netlink: 'syz.6.7933': attribute type 1 has an invalid length.
[  751.998739][   T30] audit: type=1804 audit(1768154280.688:76): pid=1610 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=invalid_pcr cause=open_writers comm="syz.3.7937" name="/newroot/378/cgroup.controllers" dev="tmpfs" ino=1945 res=1 errno=0
[  752.089573][   T30] audit: type=1800 audit(1768154280.688:77): pid=1610 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed(directio) comm="syz.3.7937" name="cgroup.controllers" dev="tmpfs" ino=1945 res=0 errno=0
[  752.287903][ T5839] Bluetooth: hci7: unexpected cc 0x0c03 length: 249 > 1
[  752.303861][ T5839] Bluetooth: hci7: unexpected cc 0x1003 length: 249 > 9
[  752.321479][ T5839] Bluetooth: hci7: unexpected cc 0x1001 length: 249 > 9
[  752.334327][ T5839] Bluetooth: hci7: unexpected cc 0x0c23 length: 249 > 4
[  752.342375][ T5839] Bluetooth: hci7: unexpected cc 0x0c38 length: 249 > 2
[  752.409023][ T1629] netlink: 'syz.1.7942': attribute type 2 has an invalid length.
[  752.440445][ T1625] wlan0 speed is unknown, defaulting to 1000
[  752.451694][ T1625] lo speed is unknown, defaulting to 1000
[  752.663849][ T1636] ipvlan0: entered allmulticast mode
[  752.671076][ T1636] batadv_slave_1: entered allmulticast mode
[  752.687004][ T1636] batman_adv: batadv0: Adding interface: ipvlan0
[  752.695572][ T1636] batman_adv: batadv0: The MTU of interface ipvlan0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1568 would solve the problem.
[  752.730846][ T1636] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1
[  752.742073][ T1636] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems!
[  752.753122][ T1636] batman_adv: batadv0: Interface activated: ipvlan0
[  752.827722][ T4375] netdevsim netdevsim5 eth3 (unregistering): unset [0, 0] type 1 family 0 port 8472 - 0
[  752.902290][ T4375] netdevsim netdevsim5 eth2 (unregistering): unset [0, 0] type 1 family 0 port 8472 - 0
[  753.036184][ T4375] netdevsim netdevsim5 eth1 (unregistering): unset [0, 0] type 1 family 0 port 8472 - 0
[  753.143165][ T4375] netdevsim netdevsim5 eth0 (unregistering): unset [0, 0] type 1 family 0 port 8472 - 0
[  753.174814][ T1625] chnl_net:caif_netlink_parms(): no params data found
[  753.344687][ T6749] netdevsim netdevsim5 eth1: set [1, 0] type 2 family 0 port 6081 - 0
[  753.452842][ T1625] bridge0: port 1(bridge_slave_0) entered blocking state
[  753.464070][ T1625] bridge0: port 1(bridge_slave_0) entered disabled state
[  753.472442][ T1625] bridge_slave_0: entered allmulticast mode
[  753.482310][ T1625] bridge_slave_0: entered promiscuous mode
[  753.494892][ T1625] bridge0: port 2(bridge_slave_1) entered blocking state
[  753.502810][ T1625] bridge0: port 2(bridge_slave_1) entered disabled state
[  753.511694][ T1625] bridge_slave_1: entered allmulticast mode
[  753.521685][ T1625] bridge_slave_1: entered promiscuous mode
[  753.529585][ T6059] netdevsim netdevsim5 eth2: set [1, 0] type 2 family 0 port 6081 - 0
[  753.546431][ T1660] tipc: Enabled bearer <eth:syzkaller0>, priority 0
[  753.570887][ T1668] syzkaller0: entered promiscuous mode
[  753.591139][ T1668] syzkaller0: entered allmulticast mode
[  753.641222][ T6059] netdevsim netdevsim5 eth3: set [1, 0] type 2 family 0 port 6081 - 0
[  753.669940][ T1668] sch_tbf: burst 127 is lower than device syzkaller0 mtu (1514) !
[  753.778230][ T1660] tipc: Resetting bearer <eth:syzkaller0>
[  753.811781][ T1625] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link
[  753.841109][ T6059] netdevsim netdevsim5 eth4: set [1, 0] type 2 family 0 port 6081 - 0
[  753.902312][ T4375] veth0_to_bond: left allmulticast mode
[  753.921191][ T4375] veth0_to_bond: left promiscuous mode
[  753.937920][ T4375] bridge6: port 2(veth0_to_bond) entered disabled state
[  753.975969][ T4375] veth13: left allmulticast mode
[  753.981053][ T4375] veth13: left promiscuous mode
[  753.991397][ T4375] bridge6: port 1(veth13) entered disabled state
[  754.304733][ T4375] dvmrp0 (unregistering): left allmulticast mode
[  754.330877][ T4375] bond2 (unregistering): (slave geneve2): Releasing active interface
[  754.376928][ T5830] Bluetooth: hci7: command tx timeout
[  754.469966][ T4375] bond5 (unregistering): (slave bridge2): Releasing backup interface
[  754.478384][ T4375] bridge2 (unregistering): left promiscuous mode
[  754.707414][ T4375] bond17 (unregistering): (slave bridge5): Releasing backup interface
[  754.715753][ T4375] bridge5 (unregistering): left promiscuous mode
[  754.811917][ T4375] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface
[  754.822655][ T4375] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface
[  754.832229][ T4375] bond0 (unregistering): Released all slaves
[  754.844771][ T4375] bond1 (unregistering): Released all slaves
[  754.859255][ T4375] bond2 (unregistering): Released all slaves
[  754.871412][ T4375] bond3 (unregistering): Released all slaves
[  754.994226][ T4375] bond4 (unregistering): Released all slaves
[  755.123133][ T4375] bond5 (unregistering): Released all slaves
[  755.239079][ T4375] bond6 (unregistering): Released all slaves
[  755.354485][ T4375] bond7 (unregistering): Released all slaves
[  755.477863][ T4375] bond8 (unregistering): Released all slaves
[  755.599609][ T4375] bond9 (unregistering): Released all slaves
[  755.722835][ T4375] bond10 (unregistering): Released all slaves
[  755.853178][ T4375] bond11 (unregistering): Released all slaves
[  755.978748][ T4375] bond12 (unregistering): Released all slaves
[  756.104367][ T4375] bond13 (unregistering): Released all slaves
[  756.237967][ T4375] bond14 (unregistering): Released all slaves
[  756.370775][ T4375] bond15 (unregistering): Released all slaves
[  756.384194][ T4375] bond16 (unregistering): Released all slaves
[  756.460341][ T5830] Bluetooth: hci7: command 0x041b tx timeout
[  756.519113][ T4375] bond17 (unregistering): Released all slaves
[  756.533242][ T1625] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link
[  756.568206][ T1658] tipc: Resetting bearer <eth:syzkaller0>
[  756.599518][ T1658] tipc: Disabling bearer <eth:syzkaller0>
[  756.734017][ T4375] tipc: Left network mode
[  756.759750][ T4375] IPVS: stopping backup sync thread 28777 ...
[  756.796547][ T1625] team0: Port device team_slave_0 added
[  756.823777][ T1625] team0: Port device team_slave_1 added
[  756.857145][ T1698] __nla_validate_parse: 10 callbacks suppressed
[  756.857190][ T1698] netlink: 72 bytes leftover after parsing attributes in process `syz.3.7957'.
[  756.974623][ T1625] batman_adv: batadv0: Adding interface: batadv_slave_0
[  756.993406][ T1625] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem.
[  757.037088][ T1625] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active
[  757.080605][ T1625] batman_adv: batadv0: Adding interface: batadv_slave_1
[  757.098709][ T1625] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem.
[  757.136232][ T1625] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active
[  757.214102][ T1709] ipvlan3: entered promiscuous mode
[  757.248188][ T1709] ipvlan4: entered promiscuous mode
[  757.279889][ T1625] hsr_slave_0: entered promiscuous mode
[  757.287727][ T1625] hsr_slave_1: entered promiscuous mode
[  757.294442][ T1625] debugfs: 'hsr0' already exists in 'hsr'
[  757.301133][ T1625] Cannot create hsr debugfs directory
[  757.315727][ T1709] ipvlan5: entered promiscuous mode
[  757.346538][ T1709] ipvlan6: entered promiscuous mode
[  757.370845][ T1709] ipvlan7: entered promiscuous mode
[  757.412879][ T1709] ipvlan8: entered promiscuous mode
[  757.454776][ T1709] ipvlan9: entered promiscuous mode
[  757.501334][ T1709] ipvlan10: entered promiscuous mode
[  757.520398][ T1709] ipvlan11: entered promiscuous mode
[  757.605547][ T1709] ipvlan12: entered promiscuous mode
[  757.707637][ T1709] ipvlan13: entered promiscuous mode
[  757.751335][ T1714] netlink: 44 bytes leftover after parsing attributes in process `syz.1.7963'.
[  757.789596][ T1709] ipvlan14: entered promiscuous mode
[  757.856862][ T1709] ipvlan15: entered promiscuous mode
[  757.979638][ T1727] netlink: 40 bytes leftover after parsing attributes in process `syz.0.7967'.
[  757.998762][ T1709] ipvlan16: entered promiscuous mode
[  758.043225][ T1709] ipvlan17: entered promiscuous mode
[  758.102475][ T4375] v: left promiscuous mode
[  758.161701][ T1732] netlink: 4 bytes leftover after parsing attributes in process `syz.0.7969'.
[  758.448343][ T1744] netlink: 4 bytes leftover after parsing attributes in process `syz.0.7969'.
[  758.544091][ T5830] Bluetooth: hci7: command 0x041b tx timeout
[  758.995578][ T3689] smc: removing ib device sy�
[  759.212156][ T1732] bridge_slave_1: left allmulticast mode
[  759.220139][ T1732] bridge_slave_1: left promiscuous mode
[  759.231975][ T1732] bridge0: port 2(bridge_slave_1) entered disabled state
[  759.240924][ T1732] bridge_slave_0: left allmulticast mode
[  759.246951][ T1732] bridge_slave_0: left promiscuous mode
[  759.252663][ T1732] bridge0: port 1(bridge_slave_0) entered disabled state
[  759.465394][ T1625] netdevsim netdevsim5 eth4 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[  759.769736][ T1625] netdevsim netdevsim5 eth3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[  759.880734][ T1780] openvswitch: netlink: Key 9 has unexpected len 2 expected 4
[  759.968104][ T1780] netlink: 20 bytes leftover after parsing attributes in process `syz.3.7976'.
[  760.003883][ T1625] netdevsim netdevsim5 eth2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[  760.249211][ T1625] netdevsim netdevsim5 eth1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[  760.513258][ T1798] nci: __nci_request: wait_for_completion_interruptible_timeout failed -512
[  760.620219][ T5830] Bluetooth: hci7: command 0x041b tx timeout
[  760.859469][ T1625] netdevsim netdevsim5 netdevsim0: renamed from eth0
[  760.897990][ T1818] netlink: 108 bytes leftover after parsing attributes in process `syz.3.7987'.
[  760.930166][ T1625] netdevsim netdevsim5 netdevsim1: renamed from eth1
[  760.981397][ T1625] netdevsim netdevsim5 netdevsim2: renamed from eth2
[  761.073725][ T1820] veth0: entered promiscuous mode
[  761.103767][ T1625] netdevsim netdevsim5 netdevsim3: renamed from eth3
[  761.127823][ T1820] netlink: 4 bytes leftover after parsing attributes in process `syz.3.7988'.
[  761.226116][ T1819] veth0: left promiscuous mode
[  761.384931][ T1843] netlink: 'syz.3.7993': attribute type 2 has an invalid length.
[  761.406046][ T1843] netlink: 188 bytes leftover after parsing attributes in process `syz.3.7993'.
[  761.491037][ T1840] bond7: option min_links: invalid value (18446744073709551614)
[  761.502922][ T1840] bond7: option min_links: allowed values 0 - 2147483647
[  761.527030][ T1840] bond7 (unregistering): Released all slaves
[  761.606503][   T30] audit: type=1107 audit(1768154290.298:78): pid=1851 uid=0 auid=4294967295 ses=4294967295 subj=unconfined msg='ً�5����%��U�A����٠�0���l�t�ݕ/�� �6򊨊�'
[  761.812608][ T1854] syzkaller0: entered allmulticast mode
[  761.916572][ T1865] netlink: 4 bytes leftover after parsing attributes in process `syz.6.7999'.
[  762.115969][ T1861] bridge0: port 1(bridge_slave_0) entered disabled state
[  762.219887][ T1861] bridge_slave_0: left allmulticast mode
[  762.226977][ T1861] bridge_slave_0: left promiscuous mode
[  762.233809][ T1861] bridge0: port 1(bridge_slave_0) entered disabled state
[  762.298819][ T1874] openvswitch: netlink: Unexpected mask (mask=2020040, allowed=2010048)
[  762.366581][ T1861] team0: Port device team_slave_0 removed
[  762.389639][ T1861] team0: Port device team_slave_1 removed
[  762.403670][ T1861] batman_adv: batadv0: Interface deactivated: batadv_slave_0
[  762.413338][ T1872] netlink: 'syz.0.8001': attribute type 4 has an invalid length.
[  762.427612][ T1861] batman_adv: batadv0: Removing interface: batadv_slave_0
[  762.449231][ T1861] batman_adv: batadv0: Interface deactivated: batadv_slave_1
[  762.464157][ T1876] netlink: 'syz.0.8001': attribute type 4 has an invalid length.
[  762.466857][ T1861] batman_adv: batadv0: Removing interface: batadv_slave_1
[  762.492288][ T1861] A link change request failed with some changes committed already. Interface hsr_slave_0 may have been left with an inconsistent configuration, please check.
[  762.597480][ T1865] team2: entered promiscuous mode
[  762.609980][ T1865] team2: entered allmulticast mode
[  762.697072][ T5830] Bluetooth: hci7: command 0x041b tx timeout
[  762.714902][ T1869] v: renamed from ipvlan1
[  762.833236][ T1625] 8021q: adding VLAN 0 to HW filter on device bond0
[  762.891615][ T1625] 8021q: adding VLAN 0 to HW filter on device team0
[  762.953832][ T2982] bridge0: port 1(bridge_slave_0) entered blocking state
[  762.961090][ T2982] bridge0: port 1(bridge_slave_0) entered forwarding state
[  762.993041][ T1897] netlink: 4 bytes leftover after parsing attributes in process `syz.6.8006'.
[  763.027158][ T2982] bridge0: port 2(bridge_slave_1) entered blocking state
[  763.034298][ T2982] bridge0: port 2(bridge_slave_1) entered forwarding state
[  763.051076][ T1893] netlink: 8 bytes leftover after parsing attributes in process `syz.1.8005'.
[  763.176547][   T31] INFO: task syz.4.6935:30788 blocked for more than 143 seconds.
[  763.184320][   T31]       Not tainted syzkaller #0
SYZFAIL: failed to recv rpc
fd=3 want=4 recv=0 n=0 (errno 9: Bad file descriptor)
[  763.217801][   T31] "echo 0 > /proc/sys/kernel/hung_task_timeout_secs" disables this message.
[  763.253223][   T31] task:syz.4.6935      state:D stack:26552 pid:30788 tgid:30787 ppid:27063  task_flags:0x400140 flags:0x00080002
[  763.297442][ T1903] netlink: 16 bytes leftover after parsing attributes in process `syz.1.8007'.
[  763.300817][   T31] Call Trace:
[  763.350505][   T31]  <TASK>
[  763.353708][   T31]  __schedule+0x149b/0x4fd0
[  763.380828][   T31]  ? preempt_schedule_notrace+0x57/0x90
[  763.435228][   T31]  ? __pfx___schedule+0x10/0x10
[  763.485373][   T31]  ? schedule+0x91/0x360
[  763.503052][   T31]  schedule+0x165/0x360
[  763.515431][   T31]  schedule_preempt_disabled+0x13/0x30
[  763.520940][   T31]  __mutex_lock+0x7e6/0x1350
[  763.533316][   T31]  ? ___sys_sendmsg+0x21f/0x2a0
[  763.538743][   T31]  ? __x64_sys_sendmsg+0x19b/0x260
[  763.543892][   T31]  ? __mutex_lock+0x5bb/0x1350
[  763.549423][   T31]  ? nfsd_nl_version_set_doit+0xc2/0x770
[  763.555484][   T31]  ? __pfx___mutex_lock+0x10/0x10
[  763.560550][   T31]  nfsd_nl_version_set_doit+0xc2/0x770
[  763.568392][   T31]  ? rcu_is_watching+0x15/0xb0
[  763.573194][   T31]  ? __pfx_nfsd_nl_version_set_doit+0x10/0x10
[  763.595199][   T31]  ? genl_family_rcv_msg_attrs_parse+0x1c9/0x2a0
[  763.601590][   T31]  genl_family_rcv_msg_doit+0x215/0x300
[  763.607997][   T31]  ? __pfx_genl_family_rcv_msg_doit+0x10/0x10
[  763.614104][   T31]  ? bpf_lsm_capable+0x9/0x20
[  763.622900][   T31]  ? security_capable+0x7e/0x2e0
[  763.628684][   T31]  genl_rcv_msg+0x60e/0x790
[  763.633261][   T31]  ? __pfx_genl_rcv_msg+0x10/0x10
[  763.639194][   T31]  ? __pfx_nfsd_nl_version_set_doit+0x10/0x10
[  763.645493][   T31]  netlink_rcv_skb+0x208/0x470
[  763.650284][   T31]  ? __pfx_genl_rcv_msg+0x10/0x10
[  763.655874][   T31]  ? __pfx_netlink_rcv_skb+0x10/0x10
[  763.661221][   T31]  ? genl_rcv+0x19/0x40
[  763.665861][   T31]  ? down_read+0x274/0x2e0
[  763.670300][   T31]  ? genl_rcv+0xd/0x40
[  763.674397][   T31]  genl_rcv+0x28/0x40
[  763.679667][   T31]  netlink_unicast+0x82f/0x9e0
[  763.684474][   T31]  ? __pfx_netlink_unicast+0x10/0x10
[  763.690360][   T31]  ? __alloc_skb+0x198/0x3a0
[  763.694972][   T31]  ? netlink_sendmsg+0x642/0xb30
[  763.700281][   T31]  ? skb_put+0x11b/0x210
[  763.704540][   T31]  netlink_sendmsg+0x805/0xb30
[  763.709480][   T31]  ? __pfx_netlink_sendmsg+0x10/0x10
[  763.714793][   T31]  ? aa_sock_msg_perm+0xf1/0x1b0
[  763.720384][   T31]  ? bpf_lsm_socket_sendmsg+0x9/0x20
[  763.726269][   T31]  ? __pfx_netlink_sendmsg+0x10/0x10
[  763.732856][   T31]  __sock_sendmsg+0x21c/0x270
[  763.743866][   T31]  ____sys_sendmsg+0x505/0x820
[  763.751949][   T31]  ? __pfx_____sys_sendmsg+0x10/0x10
[  763.757730][   T31]  ? import_iovec+0x74/0xa0
[  763.762307][   T31]  ___sys_sendmsg+0x21f/0x2a0
[  763.767625][   T31]  ? __pfx____sys_sendmsg+0x10/0x10
[  763.772870][   T31]  ? futex_wait+0x285/0x360
[  763.777647][   T31]  ? __fget_files+0x2a/0x420
[  763.782243][   T31]  ? __fget_files+0x3a0/0x420
[  763.787294][   T31]  __x64_sys_sendmsg+0x19b/0x260
[  763.792269][   T31]  ? __pfx___x64_sys_sendmsg+0x10/0x10
[  763.797877][   T31]  ? rcu_is_watching+0x15/0xb0
[  763.802643][   T31]  do_syscall_64+0xec/0xf80
[  763.807268][   T31]  ? entry_SYSCALL_64_after_hwframe+0x77/0x7f
[  763.813338][   T31]  ? trace_irq_disable+0x37/0x100
[  763.818713][   T31]  ? clear_bhb_loop+0x60/0xb0
[  763.823392][   T31]  entry_SYSCALL_64_after_hwframe+0x77/0x7f
[  763.829406][   T31] RIP: 0033:0x7f4e6078f749
[  763.834789][   T31] RSP: 002b:00007f4e616ed038 EFLAGS: 00000246 ORIG_RAX: 000000000000002e
[  763.843384][   T31] RAX: ffffffffffffffda RBX: 00007f4e609e5fa0 RCX: 00007f4e6078f749
[  763.851710][   T31] RDX: 0000000004008090 RSI: 0000200000000140 RDI: 0000000000000005
[  763.860070][   T31] RBP: 00007f4e60813f91 R08: 0000000000000000 R09: 0000000000000000
[  763.868371][   T31] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000
[  763.876654][   T31] R13: 00007f4e609e6038 R14: 00007f4e609e5fa0 R15: 00007ffef0487238
[  763.884636][   T31]  </TASK>
[  763.915184][   T31] 
[  763.915184][   T31] Showing all locks held in the system:
[  763.922941][   T31] 1 lock held by khungtaskd/31:
[  763.955257][   T31]  #0: ffffffff8df41aa0 (rcu_read_lock){....}-{1:3}, at: debug_show_all_locks+0x2e/0x180
[  763.985156][   T31] 3 locks held by kworker/u8:13/4375:
[  763.990571][   T31]  #0: ffff88801aa9f148 ((wq_completion)netns){+.+.}-{0:0}, at: process_scheduled_works+0x9b4/0x1770
[  764.045223][   T31]  #1: ffffc9000e7c7bc0 (net_cleanup_work){+.+.}-{0:0}, at: process_scheduled_works+0x9ef/0x1770
[  764.075051][   T31]  #2: ffffffff8f304c30 (pernet_ops_rwsem){++++}-{4:4}, at: cleanup_net+0xf7/0x7a0
[  764.084456][   T31] 2 locks held by kworker/u9:1/5149:
[  764.115370][   T31]  #0: ffff888025763948 ((wq_completion)nbd2-recv){+.+.}-{0:0}, at: process_scheduled_works+0x9b4/0x1770
[  764.165131][   T31]  #1: ffffc9000ffafbc0 ((work_completion)(&args->work)){+.+.}-{0:0}, at: process_scheduled_works+0x9ef/0x1770
[  764.195386][   T31] 2 locks held by getty/5587:
[  764.200422][   T31]  #0: ffff88814c8bd0a0 (&tty->ldisc_sem){++++}-{0:0}, at: tty_ldisc_ref_wait+0x25/0x70
[  764.240559][   T31]  #1: ffffc9000332b2f0 (&ldata->atomic_read_lock){+.+.}-{4:4}, at: n_tty_read+0x449/0x1460
[  764.275132][   T31] 3 locks held by kworker/1:5/5943:
[  764.280370][   T31]  #0: ffff88813ff15948 ((wq_completion)events){+.+.}-{0:0}, at: process_scheduled_works+0x9b4/0x1770
[  764.325318][   T31]  #1: ffff8880b8724588 (psi_seq){-.-.}-{0:0}, at: psi_task_switch+0x53/0x880
[  764.334278][   T31]  #2: ffff8880279a1240 (&data->fib_lock){+.+.}-{4:4}, at: nsim_fib_event_work+0x1f7/0x3b0
[  764.385376][   T31] 3 locks held by kworker/1:17/8516:
[  764.390705][   T31]  #0: ffff88813ff15948 ((wq_completion)events){+.+.}-{0:0}, at: process_scheduled_works+0x9b4/0x1770
[  764.427868][   T31]  #1: ffffc9000ffffbc0 ((fqdir_free_work).work){+.+.}-{0:0}, at: process_scheduled_works+0x9ef/0x1770
[  764.439079][   T31]  #2: ffffffff8df474c0 (rcu_state.barrier_mutex){+.+.}-{4:4}, at: rcu_barrier+0x4c/0x570
[  764.449867][   T31] 2 locks held by syz.2.4679/22562:
[  764.455346][   T31]  #0: ffffffff8f379bb0 (cb_lock){++++}-{4:4}, at: genl_rcv+0x19/0x40
[  764.463595][   T31]  #1: ffffffff8e237968 (nfsd_mutex){+.+.}-{4:4}, at: nfsd_nl_listener_set_doit+0x137/0x1660
[  764.474391][   T31] 3 locks held by syz-executor/26615:
[  764.480004][   T31]  #0: ffff888061948ec0 (&hdev->req_lock){+.+.}-{4:4}, at: hci_unregister_dev+0x212/0x5b0
[  764.489980][   T31]  #1: ffff8880619480c0 (&hdev->lock){+.+.}-{4:4}, at: hci_dev_close_sync+0x640/0x1100
[  764.499750][   T31]  #2: ffffffff8f484108 (hci_cb_list_lock){+.+.}-{4:4}, at: hci_conn_hash_flush+0xa1/0x260
[  764.509932][   T31] 3 locks held by kworker/1:0/28245:
[  764.515376][   T31]  #0: ffff88813ff15948 ((wq_completion)events){+.+.}-{0:0}, at: process_scheduled_works+0x9b4/0x1770
[  764.526818][   T31]  #1: ffffc900051dfbc0 (free_ipc_work){+.+.}-{0:0}, at: process_scheduled_works+0x9ef/0x1770
[  764.537572][   T31]  #2: ffffffff8df475f8 (rcu_state.exp_mutex){+.+.}-{4:4}, at: synchronize_rcu_expedited+0x36e/0x6e0
[  764.549350][   T31] 3 locks held by syz-executor/28553:
[  764.554749][   T31]  #0: ffff8880656d0ec0 (&hdev->req_lock){+.+.}-{4:4}, at: hci_unregister_dev+0x212/0x5b0
[  764.564887][   T31]  #1: ffff8880656d00c0 (&hdev->lock){+.+.}-{4:4}, at: hci_dev_close_sync+0x640/0x1100
[  764.575504][   T31]  #2: ffffffff8f484108 (hci_cb_list_lock){+.+.}-{4:4}, at: hci_conn_hash_flush+0xa1/0x260
[  764.585605][   T31] 2 locks held by syz.4.6935/30788:
[  764.590814][   T31]  #0: ffffffff8f379bb0 (cb_lock){++++}-{4:4}, at: genl_rcv+0x19/0x40
[  764.599124][   T31]  #1: ffffffff8e237968 (nfsd_mutex){+.+.}-{4:4}, at: nfsd_nl_version_set_doit+0xc2/0x770
[  764.609229][   T31] 4 locks held by syz-executor/31529:
[  764.614592][   T31]  #0: ffff888077cc0ec0 (&hdev->req_lock){+.+.}-{4:4}, at: hci_unregister_dev+0x212/0x5b0
[  764.624664][   T31]  #1: ffff888077cc00c0 (&hdev->lock){+.+.}-{4:4}, at: hci_dev_close_sync+0x640/0x1100
[  764.634421][   T31]  #2: ffffffff8f484108 (hci_cb_list_lock){+.+.}-{4:4}, at: hci_conn_hash_flush+0xa1/0x260
[  764.644914][   T31]  #3: ffff888067831b38 (&conn->lock#2){+.+.}-{4:4}, at: l2cap_conn_del+0x7b/0x5b0
[  764.654782][   T31] 3 locks held by kworker/1:1/31811:
[  764.660422][   T31]  #0: ffff88813ff15948 ((wq_completion)events){+.+.}-{0:0}, at: process_scheduled_works+0x9b4/0x1770
[  764.671631][   T31]  #1: ffffc90004fcfbc0 (xfrm_state_gc_work){+.+.}-{0:0}, at: process_scheduled_works+0x9ef/0x1770
[  764.682825][   T31]  #2: ffffffff8df475f8 (rcu_state.exp_mutex){+.+.}-{4:4}, at: synchronize_rcu_expedited+0x2b1/0x6e0
[  764.693822][   T31] 3 locks held by syz-executor/1625:
[  764.699426][   T31]  #0: ffff88801db14ec0 (&hdev->req_lock){+.+.}-{4:4}, at: hci_unregister_dev+0x212/0x5b0
[  764.709453][   T31]  #1: ffff88801db140c0 (&hdev->lock){+.+.}-{4:4}, at: hci_dev_close_sync+0x640/0x1100
[  764.719348][   T31]  #2: ffffffff8f484108 (hci_cb_list_lock){+.+.}-{4:4}, at: hci_conn_hash_flush+0xa1/0x260
[  764.729565][   T31] 3 locks held by syz.3.8004/1889:
[  764.734670][   T31]  #0: ffff88805a8b8ec0 (&hdev->req_lock){+.+.}-{4:4}, at: hci_unregister_dev+0x212/0x5b0
[  764.745675][   T31]  #1: ffff88805a8b80c0 (&hdev->lock){+.+.}-{4:4}, at: hci_dev_close_sync+0x640/0x1100
[  764.756452][   T31]  #2: ffffffff8f484108 (hci_cb_list_lock){+.+.}-{4:4}, at: hci_conn_hash_flush+0xa1/0x260
[  764.766884][   T31] 
[  764.769259][   T31] =============================================
[  764.769259][   T31] 
[  764.805130][   T31] NMI backtrace for cpu 0
[  764.805153][   T31] CPU: 0 UID: 0 PID: 31 Comm: khungtaskd Not tainted syzkaller #0 PREEMPT(full) 
[  764.805175][   T31] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 10/25/2025
[  764.805188][   T31] Call Trace:
[  764.805196][   T31]  <TASK>
[  764.805206][   T31]  dump_stack_lvl+0xe8/0x150
[  764.805235][   T31]  nmi_cpu_backtrace+0x274/0x2d0
[  764.805261][   T31]  ? __pfx_nmi_raise_cpu_backtrace+0x10/0x10
[  764.805290][   T31]  nmi_trigger_cpumask_backtrace+0x17a/0x300
[  764.805321][   T31]  sys_info+0x135/0x170
[  764.805343][   T31]  watchdog+0xf95/0xfe0
[  764.805375][   T31]  ? watchdog+0x20a/0xfe0
[  764.805414][   T31]  kthread+0x711/0x8a0
[  764.805443][   T31]  ? __pfx_watchdog+0x10/0x10
[  764.805468][   T31]  ? __pfx_kthread+0x10/0x10
[  764.805497][   T31]  ? _raw_spin_unlock_irq+0x23/0x50
[  764.805526][   T31]  ? __pfx_kthread+0x10/0x10
[  764.805551][   T31]  ret_from_fork+0x510/0xa50
[  764.805571][   T31]  ? __pfx_ret_from_fork+0x10/0x10
[  764.805586][   T31]  ? __switch_to+0xc9e/0x1480
[  764.805614][   T31]  ? __pfx_kthread+0x10/0x10
[  764.805639][   T31]  ret_from_fork_asm+0x1a/0x30
[  764.805675][   T31]  </TASK>
[  764.805683][   T31] Sending NMI from CPU 0 to CPUs 1:
[  764.820600][ T4375] IPVS: stop unused estimator thread 0...
[  764.821818][    C1] NMI backtrace for cpu 1
[  764.821834][    C1] CPU: 1 UID: 0 PID: 4375 Comm: kworker/u8:13 Not tainted syzkaller #0 PREEMPT(full) 
[  764.821854][    C1] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 10/25/2025
[  764.821865][    C1] Workqueue: netns cleanup_net
[  764.821886][    C1] RIP: 0010:io_serial_in+0x77/0xc0
[  764.821907][    C1] Code: e8 de cf a6 fc 44 89 f9 d3 e3 49 83 c6 40 4c 89 f0 48 c1 e8 03 42 80 3c 20 00 74 08 4c 89 f7 e8 ef ef 0c fd 41 03 1e 89 da ec <0f> b6 c0 5b 41 5c 41 5e 41 5f e9 0a 78 42 06 cc 44 89 f9 80 e1 07
[  764.821921][    C1] RSP: 0018:ffffc9000e7c7210 EFLAGS: 00000002
[  764.821935][    C1] RAX: 1ffffffff3381400 RBX: 00000000000003fd RCX: 0000000000000000
[  764.821947][    C1] RDX: 00000000000003fd RSI: 0000000000000000 RDI: 0000000000000020
[  764.821958][    C1] RBP: ffffffff99c0a550 R08: ffff888024c00237 R09: 1ffff11004980046
[  764.821971][    C1] R10: dffffc0000000000 R11: ffffffff851a2790 R12: dffffc0000000000
[  764.821984][    C1] R13: 0000000000000000 R14: ffffffff99c0a2c0 R15: 0000000000000000
[  764.821996][    C1] FS:  0000000000000000(0000) GS:ffff888125f1f000(0000) knlGS:0000000000000000
[  764.822010][    C1] CS:  0010 DS: 0000 ES: 0000 CR0: 0000000080050033
[  764.822022][    C1] CR2: 0000200000017038 CR3: 000000000dd3a000 CR4: 00000000003526f0
[  764.822037][    C1] Call Trace:
[  764.822044][    C1]  <TASK>
[  764.822053][    C1]  wait_for_lsr+0x1a1/0x2f0
[  764.822078][    C1]  serial8250_console_write+0x1301/0x1b60
[  764.822103][    C1]  ? __pfx_serial8250_console_write+0x10/0x10
[  764.822120][    C1]  ? console_flush_all+0x11a/0xb00
[  764.822154][    C1]  ? do_raw_spin_unlock+0x122/0x240
[  764.822177][    C1]  ? console_flush_all+0x11a/0xb00
[  764.822198][    C1]  console_flush_all+0x713/0xb00
[  764.822221][    C1]  ? console_flush_all+0x11a/0xb00
[  764.822245][    C1]  ? __pfx_console_flush_all+0x10/0x10
[  764.822269][    C1]  ? is_printk_cpu_sync_owner+0x32/0x40
[  764.822295][    C1]  console_unlock+0xbb/0x190
[  764.822314][    C1]  ? vprintk_emit+0x2c5/0x550
[  764.822334][    C1]  ? __pfx_console_unlock+0x10/0x10
[  764.822355][    C1]  ? vprintk_emit+0x2c5/0x550
[  764.822373][    C1]  ? vprintk_emit+0x2c5/0x550
[  764.822393][    C1]  vprintk_emit+0x47b/0x550
[  764.822414][    C1]  ? __pfx_vprintk_emit+0x10/0x10
[  764.822438][    C1]  _printk+0xcf/0x120
[  764.822461][    C1]  ? __pfx___mutex_lock+0x10/0x10
[  764.822481][    C1]  ? __pfx__printk+0x10/0x10
[  764.822507][    C1]  ? _raw_spin_unlock_irqrestore+0x30/0x80
[  764.822533][    C1]  ip_vs_stop_estimator+0xbb8/0xec0
[  764.822564][    C1]  ip_vs_control_net_cleanup+0x269/0x3e0
[  764.822583][    C1]  __ip_vs_cleanup_batch+0x8b/0x100
[  764.822607][    C1]  ? __pfx___ip_vs_cleanup_batch+0x10/0x10
[  764.822630][    C1]  ops_undo_list+0x525/0x990
[  764.822650][    C1]  ? __pfx_ops_undo_list+0x10/0x10
[  764.822668][    C1]  ? do_raw_spin_unlock+0x122/0x240
[  764.822692][    C1]  cleanup_net+0x4d8/0x7a0
[  764.822710][    C1]  ? __pfx_cleanup_net+0x10/0x10
[  764.822729][    C1]  ? process_scheduled_works+0x9ef/0x1770
[  764.822745][    C1]  ? process_scheduled_works+0x9ef/0x1770
[  764.822763][    C1]  process_scheduled_works+0xad1/0x1770
[  764.822792][    C1]  ? __pfx_process_scheduled_works+0x10/0x10
[  764.822808][    C1]  ? do_raw_spin_lock+0x121/0x290
[  764.822837][    C1]  worker_thread+0x8a0/0xda0
[  764.822867][    C1]  kthread+0x711/0x8a0
[  764.822889][    C1]  ? __pfx_worker_thread+0x10/0x10
[  764.822905][    C1]  ? __pfx_kthread+0x10/0x10
[  764.822927][    C1]  ? _raw_spin_unlock_irq+0x23/0x50
[  764.822950][    C1]  ? __pfx_kthread+0x10/0x10
[  764.822970][    C1]  ret_from_fork+0x510/0xa50
[  764.822987][    C1]  ? __pfx_ret_from_fork+0x10/0x10
[  764.823001][    C1]  ? __switch_to+0xc9e/0x1480
[  764.823025][    C1]  ? __pfx_kthread+0x10/0x10
[  764.823045][    C1]  ret_from_fork_asm+0x1a/0x30
[  764.823075][    C1]  </TASK>
[  764.834209][   T31] Kernel panic - not syncing: hung_task: blocked tasks
[  764.834230][   T31] CPU: 0 UID: 0 PID: 31 Comm: khungtaskd Not tainted syzkaller #0 PREEMPT(full) 
[  764.834252][   T31] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 10/25/2025
[  764.834266][   T31] Call Trace:
[  764.834274][   T31]  <TASK>
[  764.834285][   T31]  vpanic+0x1e0/0x670
[  764.834316][   T31]  panic+0xb9/0xc0
[  764.834340][   T31]  ? __pfx_panic+0x10/0x10
[  764.834365][   T31]  ? preempt_schedule_thunk+0x16/0x30
[  764.834389][   T31]  ? nmi_trigger_cpumask_backtrace+0x2bb/0x300
[  764.834427][   T31]  watchdog+0xfdf/0xfe0
[  764.834457][   T31]  ? watchdog+0x20a/0xfe0
[  764.834490][   T31]  kthread+0x711/0x8a0
[  764.834518][   T31]  ? __pfx_watchdog+0x10/0x10
[  764.834543][   T31]  ? __pfx_kthread+0x10/0x10
[  764.834571][   T31]  ? _raw_spin_unlock_irq+0x23/0x50
[  764.834600][   T31]  ? __pfx_kthread+0x10/0x10
[  764.834624][   T31]  ret_from_fork+0x510/0xa50
[  764.834647][   T31]  ? __pfx_ret_from_fork+0x10/0x10
[  764.834664][   T31]  ? __switch_to+0xc9e/0x1480
[  764.834695][   T31]  ? __pfx_kthread+0x10/0x10
[  764.834720][   T31]  ret_from_fork_asm+0x1a/0x30
[  764.834761][   T31]  </TASK>
[  764.836354][   T31] Kernel Offset: disabled