last executing test programs:

3.359506491s ago: executing program 1 (id=2661):
bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000180)={0x1, 0x2, &(0x7f0000000140)=@raw=[@ldst={0x1, 0x0, 0x3, 0x0, 0x1, 0x67}, @exit], &(0x7f00000000c0)='syzkaller\x00'}, 0x90)
r0 = socket$nl_route(0x10, 0x3, 0x0)
sendmsg$nl_route(r0, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000100)={&(0x7f0000000140)=@newlink={0x40, 0x10, 0x581, 0x0, 0x25dfdbfc, {0x0, 0x0, 0x0, 0x0, 0xd0d4, 0x50}, [@IFLA_LINKINFO={0x14, 0x12, 0x0, 0x1, @bond={{0x9}, {0x4}}}, @IFLA_ADDRESS={0xa}]}, 0x40}, 0x1, 0x0, 0x0, 0x20004002}, 0x0)
r1 = socket$alg(0x26, 0x5, 0x0)
bind$alg(r1, &(0x7f0000000000)={0x26, 'aead\x00', 0x0, 0x0, 'aegis128-generic\x00'}, 0x58)
setsockopt$ALG_SET_KEY(r1, 0x117, 0x1, &(0x7f0000000140)="2c385aa3d49100dc6626c892b6bc436a", 0x10)
bpf$PROG_LOAD(0x5, &(0x7f00000054c0)={0x3, 0x16, &(0x7f0000001e80)=ANY=[@ANYBLOB="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"], &(0x7f0000000100)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @sched_cls, 0xffffffffffffffff, 0x8, &(0x7f0000000000), 0xffffffffffffffd2}, 0x48)
r2 = socket(0x10, 0x3, 0x0)
socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000240)={0xffffffffffffffff, <r3=>0xffffffffffffffff})
ioctl$sock_SIOCGIFINDEX(r3, 0x8933, &(0x7f0000000000)={'lo\x00', <r4=>0x0})
sendmsg$nl_route_sched(r2, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000840)=@newqdisc={0x2c, 0x24, 0xd0f, 0x70bd2b, 0x0, {0x60, 0x0, 0x0, r4, {0xfff2}, {0xffff, 0xffff}, {0xa, 0xffff}}, [@TCA_RATE={0x6, 0x5, {0x8, 0xf1}}]}, 0x2c}}, 0x40000)
r5 = accept4(r1, 0x0, 0x0, 0x0)
recvmmsg(r5, &(0x7f0000000180)=[{{0x0, 0x0, &(0x7f0000000200)=[{&(0x7f0000000580)=""/230, 0xe6}], 0x1}, 0x2000000}], 0x1, 0x0, 0x0)
sendmsg$IPCTNL_MSG_CT_DELETE(r5, &(0x7f0000000740)={0x0, 0x0, &(0x7f0000000700)={&(0x7f0000000780)={0x14, 0x2, 0x1, 0x101, 0x0, 0x0, {0x1, 0x0, 0x9}}, 0x14}}, 0x40008095)
getsockopt$inet6_mreq(0xffffffffffffffff, 0x29, 0xd, &(0x7f0000000000)={@private0, <r6=>0x0}, &(0x7f0000000080)=0x14)
setsockopt$inet6_mreq(r5, 0x29, 0x15, &(0x7f00000000c0)={@rand_addr=' \x01\x00', r6}, 0x14)

2.023048079s ago: executing program 1 (id=2683):
r0 = socket(0x10, 0x3, 0x0)
setsockopt$netlink_NETLINK_TX_RING(r0, 0x10e, 0xc, &(0x7f0000000280)={0xffffffff}, 0x10)
getsockopt(r0, 0xff8, 0x4270, &(0x7f0000000100)=""/2, &(0x7f0000000140)=0x2) (async)
getsockopt(r0, 0xff8, 0x4270, &(0x7f0000000100)=""/2, &(0x7f0000000140)=0x2)
sendmsg$nl_generic(r0, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000080)=ANY=[@ANYBLOB="200000001200010a00160000000000000a000000"], 0x26}}, 0x0)
r1 = socket$nl_route(0x10, 0x3, 0x0)
r2 = socket(0x10, 0x3, 0x0)
syz_genetlink_get_family_id$gtp(&(0x7f0000000000), r2) (async)
syz_genetlink_get_family_id$gtp(&(0x7f0000000000), r2)
getsockopt$bt_l2cap_L2CAP_LM(r2, 0x6, 0x3, &(0x7f0000000040), &(0x7f00000000c0)=0x3)
bpf$BPF_GET_PROG_INFO(0xf, &(0x7f0000000540)={0xffffffffffffffff, 0xe0, &(0x7f0000000400)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7, &(0x7f0000000180)=[0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0], ""/16, 0x0, 0x0, 0x0, 0x0, 0x7, 0x1, &(0x7f00000001c0)=[0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0], &(0x7f0000000200)=[0x0], 0x0, 0x2d, &(0x7f0000000240)=[{}, {}, {}, {}, {}], 0x28, 0x10, &(0x7f0000000340), &(0x7f0000000380), 0x8, 0xc7, 0x8, 0x8, &(0x7f00000003c0)}}, 0x10) (async)
bpf$BPF_GET_PROG_INFO(0xf, &(0x7f0000000540)={0xffffffffffffffff, 0xe0, &(0x7f0000000400)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7, &(0x7f0000000180)=[0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0], ""/16, <r3=>0x0, 0x0, 0x0, 0x0, 0x7, 0x1, &(0x7f00000001c0)=[0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0], &(0x7f0000000200)=[0x0], 0x0, 0x2d, &(0x7f0000000240)=[{}, {}, {}, {}, {}], 0x28, 0x10, &(0x7f0000000340), &(0x7f0000000380), 0x8, 0xc7, 0x8, 0x8, &(0x7f00000003c0)}}, 0x10)
ioctl$sock_ipv4_tunnel_SIOCGETTUNNEL(r2, 0x89f0, &(0x7f00000006c0)={'syztnl2\x00', &(0x7f0000000580)={'gretap0\x00', r3, 0x700, 0x1, 0x1, 0x3, {{0x3a, 0x4, 0x2, 0x8, 0xe8, 0x66, 0x0, 0x86, 0x2f, 0x0, @local, @private=0xa010100, {[@timestamp={0x44, 0x1c, 0xe9, 0x0, 0x0, [0x5, 0xa, 0xfffffffa, 0x6, 0xfffffffc, 0x3]}, @timestamp={0x44, 0x1c, 0xfa, 0x0, 0xe, [0x0, 0x3, 0x8, 0xcb0c, 0x3, 0x1]}, @rr={0x7, 0x23, 0x20, [@dev={0xac, 0x14, 0x14, 0x20}, @initdev={0xac, 0x1e, 0x1, 0x0}, @broadcast, @empty, @remote, @broadcast, @dev={0xac, 0x14, 0x14, 0x23}, @initdev={0xac, 0x1e, 0x0, 0x0}]}, @timestamp_prespec={0x44, 0xc, 0xe2, 0x3, 0x1, [{@broadcast, 0xfffffffc}]}, @timestamp_addr={0x44, 0x1c, 0x62, 0x1, 0xd, [{@local, 0x6}, {@empty}, {@multicast1}]}, @cipso={0x86, 0x29, 0xffffffffffffffff, [{0x6, 0x8, "85614bf90222"}, {0x0, 0xe, "4ce9b9538fd902e9ed5ac40d"}, {0x2, 0xd, "195fb3b56a3dffaa2a855d"}]}, @rr={0x7, 0xf, 0x24, [@private=0xa010100, @broadcast, @local]}, @rr={0x7, 0x17, 0x57, [@private=0xa010100, @loopback, @empty, @loopback, @rand_addr=0x64010102]}, @noop, @noop]}}}}})
ioctl$sock_SIOCGIFINDEX(r2, 0x8933, &(0x7f0000000080)={'ip6tnl0\x00'}) (async)
ioctl$sock_SIOCGIFINDEX(r2, 0x8933, &(0x7f0000000080)={'ip6tnl0\x00', <r4=>0x0})
sendmsg$nl_route(r1, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000500)={&(0x7f00000002c0)=@newlink={0x48, 0x10, 0x20, 0x0, 0x0, {0x0, 0x0, 0x0, r4}, [@IFLA_LINKINFO={0x28, 0x12, 0x0, 0x1, @ipip6={{0xb}, {0x18, 0x2, 0x0, 0x1, [@IFLA_IPTUN_LOCAL={0x14, 0x2, @ipv4={'\x00', '\xff\xff', @private=0xa010102}}]}}}]}, 0x48}}, 0x0)

2.016629642s ago: executing program 1 (id=2689):
ioctl$sock_ifreq(0xffffffffffffffff, 0x8936, &(0x7f0000000040)={'syzkaller1\x00', @ifru_mtu=0x9})
r0 = socket$nl_rdma(0x10, 0x3, 0x14)
bpf$PROG_LOAD(0x5, &(0x7f00000054c0)={0x4, 0x16, &(0x7f0000000540)=ANY=[@ANYBLOB="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"], &(0x7f0000000100)='GPL\x00'}, 0x48)
r1 = socket$inet6_sctp(0xa, 0x5, 0x84)
getsockopt$inet_sctp6_SCTP_SOCKOPT_CONNECTX3(r1, 0x84, 0x6f, &(0x7f0000003a80)={0x0, 0x1c, &(0x7f0000003980)=[@in6={0xa, 0x4, 0x0, @private2}]}, &(0x7f0000003ac0)=0x10)
ioctl$sock_netdev_private(r0, 0x89f3, &(0x7f00000000c0)="8c")
getsockopt$inet_sctp6_SCTP_PR_ASSOC_STATUS(r1, 0x84, 0x6d, &(0x7f0000000080)={0x0, 0xffff}, &(0x7f0000000200)=0x18)
sendmsg$RDMA_NLDEV_CMD_SYS_SET(r0, &(0x7f0000004480)={&(0x7f0000004380)={0x10, 0x0, 0x0, 0x200000}, 0xc, &(0x7f0000004440)={&(0x7f00000043c0)=ANY=[], 0x24}}, 0x40004)

1.609575396s ago: executing program 4 (id=2696):
r0 = socket$nl_route(0x10, 0x3, 0x0)
ioctl$sock_SIOCGIFINDEX(r0, 0x8933, &(0x7f00000018c0)={'team0\x00', <r1=>0x0})
sendmsg$nl_route(r0, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000022780)=ANY=[@ANYBLOB="4000000010003b150c000000002e000000000000", @ANYRES32=0x0, @ANYBLOB="c1900000a1540000180012800e0001007769726567756172640000000400028008000a00", @ANYRES32=r1], 0x40}}, 0x24008810)
r2 = socket$nl_netfilter(0x10, 0x3, 0xc)
getsockopt$sock_timeval(r2, 0x1, 0x42, &(0x7f00000000c0), &(0x7f0000000100)=0x10)
r3 = socket$tipc(0x1e, 0x2, 0x0)
getsockopt$TIPC_NODE_RECVQ_DEPTH(r3, 0x10f, 0x83, &(0x7f0000000180), &(0x7f00000001c0)=0x4)
sendmsg$IPSET_CMD_CREATE(r2, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000000)=ANY=[@ANYBLOB="60000000020601030000000900000000000000000500010007000000050005000a00000014000300686173683a69702c706f72742c6970000900020073797a32000000001400078008000600000001000800134000000000050004"], 0x60}}, 0x0)

1.524950915s ago: executing program 3 (id=2697):
r0 = syz_init_net_socket$rose(0xb, 0x5, 0x0)
ioctl$sock_rose_SIOCADDRT(r0, 0x890b, &(0x7f00000000c0)={@remote={0xcc, 0xcc, 0xcc, 0xcc, 0x3}, 0x401, @default, @netrom={'nr', 0x0}, 0x7, [@bcast, @remote={0xcc, 0xcc, 0xcc, 0xcc, 0xcc, 0xcc, 0x0}, @rose={0xbb, 0xbb, 0xbb, 0x1, 0x0}, @remote={0xcc, 0xcc, 0xcc, 0xcc, 0xcc, 0xcc, 0x2}, @remote={0xcc, 0xcc, 0xcc, 0xcc, 0xcc, 0xcc, 0x1}, @remote={0xcc, 0xcc, 0xcc, 0xcc, 0xcc, 0xcc, 0x0}, @remote={0xcc, 0xcc, 0xcc, 0xcc, 0xcc, 0xcc, 0x2}, @null]})
ppoll(&(0x7f0000000180)=[{}], 0xfdfe, 0x0, 0x0, 0x0)
syz_init_net_socket$ax25(0x3, 0x2, 0x3)

1.468555826s ago: executing program 3 (id=2698):
r0 = syz_init_net_socket$llc(0x1a, 0x1, 0x0)
r1 = socket$nl_netfilter(0x10, 0x3, 0xc)
sendmsg$IPSET_CMD_CREATE(r1, &(0x7f0000000100)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f00000002c0)=ANY=[@ANYBLOB="5c00000002060300000000000080000000000000050001000700000000078008001240000000000500150020000000050005000000000005000400000000000d000300686173683a6d616300"/88], 0x5c}, 0x1, 0x0, 0x0, 0x4000004}, 0x80) (async)
bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f00000004c0)={0x11, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x41000, 0x1a, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, &(0x7f0000000180)={0x4, 0x3}, 0x8, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x7}, 0x94)
r2 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000001c0)='memory.events\x00', 0x275a, 0x0)
write$cgroup_subtree(r2, &(0x7f0000000100)=ANY=[], 0x32600) (async)
r3 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10)
syz_genetlink_get_family_id$ieee802154(&(0x7f00000038c0), r3) (async)
sendmsg$IEEE802154_ASSOCIATE_RESP(r3, &(0x7f0000003980)={0x0, 0x0, &(0x7f0000003940)={&(0x7f0000000800)=ANY=[@ANYBLOB="14000000", @ANYRESDEC=r0, @ANYBLOB="01002cbd7000ffdbdf25130000006a38b3e7c8850f003c4516391fad67305276016852bf9627499531007bd8037fb42a75fc1831e3da726e8b750b9006d558f9"], 0x14}, 0x1, 0x0, 0x0, 0x4048001}, 0x200008d0) (async)
r4 = socket$inet6(0xa, 0x5, 0x0) (async)
setsockopt$inet_int(0xffffffffffffffff, 0x0, 0xf, &(0x7f0000000340)=0xfffffffffffffff9, 0x4) (async)
r5 = socket$nl_netfilter(0x10, 0x3, 0xc)
sendmsg$NFT_BATCH(r5, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000580)=ANY=[@ANYBLOB="140000001000010000000000000000000000000ac4000000090a010400000000000000000000000008000a40000000000900020073797a32000000000900010073797a3000000000080005401000000f8800098008000140c000000008000140000000071400018008000140000000040800014000000001240001800800014000000000080001400000000608000140ffffff0008000140000000001c000180080001400000000408000140000000100800014000000c0008000140000000000800014000000000140000001000010000000000000000000000000a"], 0xec}}, 0x4008050)
r6 = syz_init_net_socket$bt_hci(0x1f, 0x3, 0x6) (async)
r7 = socket$nl_netfilter(0x10, 0x3, 0xc)
sendmsg$NFULNL_MSG_CONFIG(r7, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000700)=ANY=[@ANYBLOB="1c005b32010401020000000000000000000000020500010003000000b749f411d06b5968c7109008bade1c15bbd3f550dfd27e680b35e3152bd936b4fdc063a02261dd0b6c3474859c3188be009dac53d878d140cbdb5a39c3077dd9153bf43fbee3c7b5a08ef05a295170e9f3664cd6d54c976e5347d7932884d7eee5cc735d8aa30336d46ac0868a82c9955e4894c23084b56f4368894e754c682d809df29d8368a597f55cc1b0a4c268e8e75a38e4318cdcf2c18e2544ecd9e9d24c70ecde9fb99eb43a964e29694895a87f83df6a47782e02220b4a8ecee28e6190d32d2ddc4c9f9859f4034772"], 0x1c}, 0x1, 0x0, 0x0, 0x800}, 0x0) (async)
ioctl$sock_bt_hci(r6, 0x0, 0x0) (async)
setsockopt$inet6_int(r4, 0x29, 0x1a, &(0x7f00000003c0)=0x6, 0x4) (async)
setsockopt$inet_sctp6_SCTP_SOCKOPT_BINDX_ADD(r4, 0x84, 0x64, &(0x7f0000000100)=[@in6={0xa, 0x0, 0x0, @loopback}, @in6={0xa, 0x0, 0xffffffff, @private0}], 0x38)
setsockopt$inet_sctp6_SCTP_SOCKOPT_BINDX_REM(r4, 0x84, 0x65, &(0x7f0000000040)=[@in6={0xa, 0x4e20, 0x9, @ipv4={'\x00', '\xff\xff', @empty}, 0x9}], 0x1c)
mmap(&(0x7f0000000000/0x3000)=nil, 0x3000, 0x2000001, 0x12, 0xffffffffffffffff, 0x0)
syz_genetlink_get_family_id$nl80211(&(0x7f00000003c0), 0xffffffffffffffff) (async)
r8 = socket$nl_generic(0x10, 0x3, 0x10) (async)
r9 = socket$nl_generic(0x10, 0x3, 0x10)
syz_genetlink_get_family_id$nl80211(&(0x7f0000000180), r9) (async)
ioctl$sock_SIOCGIFINDEX_80211(r9, 0x8933, &(0x7f0000000400)={'wlan1\x00', <r10=>0x0})
r11 = socket$nl_generic(0x10, 0x3, 0x10)
sendmsg$NL80211_CMD_DEL_PMKSA(r11, &(0x7f00000077c0)={0x0, 0x0, &(0x7f0000007780)={&(0x7f0000000280)=ANY=[@ANYBLOB="1c000000", @ANYRES16=r4, @ANYBLOB="df253500"/18, @ANYRES32=r10, @ANYBLOB], 0x1c}, 0x1, 0x0, 0x0, 0x40000d5}, 0x400c804) (async)
ioctl$sock_SIOCGIFINDEX_80211(r8, 0x8933, &(0x7f0000000540)={'wlan0\x00'})
sendmsg$NL80211_CMD_NEW_KEY(r2, &(0x7f00000006c0)={0x0, 0x3c, &(0x7f0000000680)={&(0x7f0000000440)=ANY=[@ANYBLOB="1e000000", @ANYRES16, @ANYRESOCT=r9, @ANYRES64=r5, @ANYRES8=r8], 0x44}, 0x1, 0x0, 0x0, 0x4}, 0x40000)

1.344392668s ago: executing program 3 (id=2700):
r0 = syz_init_net_socket$nfc_llcp(0x27, 0x1, 0x1)
setsockopt$nfc_llcp_NFC_LLCP_RW(r0, 0x118, 0x0, 0x0, 0x0) (async)
r1 = socket$nl_netfilter(0x10, 0x3, 0xc) (async)
bind$nfc_llcp(r0, &(0x7f0000000080)={0x27, 0x0, 0x1, 0x1, 0x7, 0x81, "3941d6947b0f0cd29fca95387780797f3e18ac06922f6140d7f407afa6199c00f89217c8133ecd2e94facf18971b0eef27d13d8fff6007c076999bf492dc7f", 0x16}, 0x60)
r2 = syz_init_net_socket$bt_sco(0x1f, 0x5, 0x2)
ioctl$sock_ifreq(r2, 0x8910, &(0x7f0000000000)={'veth0_vlan\x00', @ifru_ivalue=0x4})
ioctl$sock_netdev_private(r2, 0x89f8, &(0x7f0000000000))
sendmsg$IPCTNL_MSG_TIMEOUT_DEFAULT_SET(r1, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000100)={&(0x7f0000000040)=ANY=[@ANYBLOB="3800000003080500e6ff000000000000000000000508040000000000000800064000000000060017c34b0ffce61bc9e96fec34"], 0x38}}, 0x0)

1.327518664s ago: executing program 4 (id=2701):
r0 = socket$nl_generic(0x10, 0x3, 0x10)
sendmsg$nl_generic(r0, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000001700)=ANY=[@ANYBLOB="18000000240001"], 0x18}, 0x1, 0x0, 0x0, 0x8001}, 0x4000)
r1 = syz_genetlink_get_family_id$nl80211(&(0x7f00000000c0), r0)
recvmmsg(r0, &(0x7f0000004ec0)=[{{0x0, 0x0, &(0x7f0000000000)=[{&(0x7f00000002c0)=""/4077, 0xfed}], 0x1}, 0x9}], 0x1, 0x2000, 0x0)
ioctl$sock_inet_SIOCADDRT(0xffffffffffffffff, 0x890b, &(0x7f00000004c0)={0x0, {0x2, 0x0, @empty}, {0x2, 0x0, @dev}, {0x2, 0x0, @empty}})
r2 = syz_genetlink_get_family_id$mptcp(&(0x7f0000001300), r0)
sendmsg$MPTCP_PM_CMD_ADD_ADDR(r0, &(0x7f0000001400)={&(0x7f00000012c0)={0x10, 0x0, 0x0, 0x2}, 0xc, &(0x7f00000013c0)={&(0x7f0000001340)=ANY=[@ANYBLOB='T\x00\x00\x00', @ANYRES16=r2, @ANYBLOB="000429bd7000fcdbdf250100000008000200070000000800030027000000080002000700000005000500060000000800030004000000080002000300000008000300080000000800030002000000"], 0x54}, 0x1, 0x0, 0x0, 0x4000}, 0x4040830)
r3 = syz_init_net_socket$nl_rdma(0x10, 0x3, 0x10)
sendmsg$netlink(r3, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000000)=[{&(0x7f0000000440)=ANY=[@ANYBLOB="1801"], 0x118}], 0x1, 0x0, 0x0, 0x1}, 0x0)
r4 = socket$nl_route(0x10, 0x3, 0x0)
r5 = syz_init_net_socket$ax25(0x3, 0x2, 0x6)
ioctl$SIOCAX25ADDFWD(r5, 0x89ea, &(0x7f0000000040)={@bcast, @rose={0xbb, 0xbb, 0xbb, 0x1, 0x0}})
r6 = bpf$BPF_PROG_WITH_BTFID_LOAD(0x5, &(0x7f0000000180)=@bpf_lsm={0x6, 0x3, &(0x7f0000000100)=ANY=[@ANYRESHEX=r1], &(0x7f0000000080)='syzkaller\x00', 0x0, 0x0, 0x0, 0x40f00}, 0x94)
sendmsg$nl_route(r4, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000240)=ANY=[@ANYRESDEC=r1, @ANYRES32=0x0, @ANYBLOB="2e2002001d64f80b856b1b50a432d33902d80500000014002b80080003000300000008000100", @ANYRES32=r6, @ANYBLOB='\b\t\x00\x00\x00\x00\x00\x00'], 0x3c}, 0x1, 0x0, 0x0, 0x20048050}, 0x40014)

1.150843053s ago: executing program 3 (id=2703):
r0 = socket$inet6_mptcp(0xa, 0x1, 0x106)
r1 = socket$nl_generic(0x10, 0x3, 0x10)
r2 = syz_genetlink_get_family_id$ethtool(&(0x7f0000000100), 0xffffffffffffffff)
sendmsg$ETHTOOL_MSG_FEATURES_SET(r1, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000bc0)={0x24, r2, 0x1, 0x0, 0x0, {}, [@ETHTOOL_A_FEATURES_HEADER={0xc, 0x1, 0x0, 0x1, [@ETHTOOL_A_HEADER_FLAGS={0x8, 0x3, 0x1}]}, @ETHTOOL_A_FEATURES_WANTED={0x4}]}, 0x24}}, 0x0)
setsockopt$inet6_tcp_TLS_TX(r0, 0x6, 0x1, &(0x7f0000001b80)=@gcm_256={{0x303}, "e11fd25f228e7de8", "8452fe0e66fa615e00e1c0742c52d98f60149ba20f6258068c42e89f4175c12c", "8c11f4c2", "1bd80c52b34eb5b5"}, 0x38)
sendmsg$IPCTNL_MSG_CT_NEW(0xffffffffffffffff, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000280)=ANY=[@ANYBLOB="340000000001010400a90000000000000208000440000000000800024000000000080003400000000004000180"], 0x34}, 0x1, 0x0, 0x0, 0x4}, 0x0)
r3 = socket$nl_generic(0x10, 0x3, 0x10)
sendmsg$nl_generic(r3, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000280)=ANY=[@ANYBLOB="440000003e000701feffffff00000000017c0000040042800c00018006000600800a0000200002801c0017800400ad0014"], 0x44}, 0x1, 0x0, 0x0, 0x40040c0}, 0xc000)

1.147227546s ago: executing program 1 (id=2704):
bpf$MAP_CREATE(0x0, 0x0, 0x0)
bpf$PROG_LOAD_XDP(0x5, &(0x7f00000004c0)={0x3, 0xc, &(0x7f0000000440)=ANY=[], 0x0}, 0x94)
bpf$BPF_PROG_TEST_RUN(0xa, 0x0, 0x0)
r0 = socket$nl_route(0x10, 0x3, 0x0)
ioctl$sock_SIOCGIFINDEX(r0, 0x8933, &(0x7f0000000040)={'tunl0\x00', <r1=>0x0})
sendmsg$nl_route_sched(r0, &(0x7f0000001200)={0x0, 0x0, &(0x7f0000000000)={&(0x7f00000008c0)=@newqdisc={0x58, 0x24, 0x4ee4e6a52ff56541, 0x0, 0x0, {0x0, 0x0, 0x0, r1, {}, {0xffff, 0xffff}}, [@qdisc_kind_options=@q_taprio={{0xb}, {0x4}}, @TCA_STAB={0x24, 0x8, 0x0, 0x1, [{{0x1c, 0x1, {0x0, 0x0, 0x0, 0x0, 0x2, 0x1}}, {0x4}}]}]}, 0x58}}, 0x0)
r2 = socket$nl_route(0x10, 0x3, 0x0)
r3 = bpf$BPF_PROG_WITH_BTFID_LOAD(0x5, &(0x7f0000000280)=@bpf_lsm={0x6, 0x3, &(0x7f00000003c0)=ANY=[@ANYBLOB="180000000400000000000000000000f195"], &(0x7f0000000140)='GPL\x00', 0x0, 0x0, 0x0, 0x41100}, 0x94)
bpf$BPF_BTF_LOAD(0x12, &(0x7f0000000300)={0x0, 0x0, 0x0, 0x0, 0x1}, 0x28)
bpf$BPF_BTF_GET_FD_BY_ID(0x13, &(0x7f0000001840), 0x4)
bpf$BPF_PROG_WITH_BTFID_LOAD(0x5, 0x0, 0x0)
sendmsg$nl_route(r2, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000080)={&(0x7f00000000c0)=@newlink={0x3c, 0x10, 0x801, 0x0, 0x0, {}, [@IFLA_XDP={0xc, 0x2b, 0x0, 0x1, [@IFLA_XDP_FD={0x8, 0x1, r3}]}, @IFLA_GROUP={0x8}, @IFLA_MASTER={0x8}]}, 0x3c}}, 0x0)

1.107289059s ago: executing program 4 (id=2706):
r0 = socket(0x10, 0x3, 0x0)
setsockopt$netlink_NETLINK_TX_RING(r0, 0x10e, 0xc, &(0x7f0000000140)={0x6}, 0x10)
write(r0, &(0x7f0000000000)="1c0000001a005f0214f9f407000904001f000000ff02000200000000", 0x1c)
r1 = socket$nl_route(0x10, 0x3, 0x0)
r2 = openat$cgroup(0xffffffffffffffff, &(0x7f0000000040)='syz0\x00', 0x200002, 0x0)
openat$cgroup_ro(r2, &(0x7f00000000c0)='cgroup.stat\x00', 0x0, 0x0)
sendmsg$nl_route(r1, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000180)=ANY=[@ANYBLOB="28000000100001000200"/20, @ANYRES32=0x0, @ANYBLOB="010a05000101040008001b"], 0x28}}, 0x0)
syz_genetlink_get_family_id$ipvs(&(0x7f0000000080), r0)

1.013714375s ago: executing program 1 (id=2708):
ioctl$sock_SIOCGIFINDEX(0xffffffffffffffff, 0x8933, &(0x7f0000000000)={'lo\x00', <r0=>0x0})
r1 = socket$nl_route(0x10, 0x3, 0x0)
r2 = socket$alg(0x26, 0x5, 0x0)
bind$alg(r2, &(0x7f0000000000)={0x26, 'aead\x00', 0x0, 0x0, 'gcm_base(ctr(aes-aesni),ghash-generic)\x00'}, 0x58)
setsockopt$ALG_SET_KEY(r2, 0x117, 0x1, &(0x7f0000000140)="2c385aa3d49100dc6626c892b6bc436a", 0x10)
r3 = accept4(r2, 0x0, 0x0, 0x0)
r4 = socket$inet6(0xa, 0x3, 0x3a)
setsockopt$inet6_mreq(r4, 0x29, 0x14, &(0x7f0000000200)={@mcast1}, 0x14)
recvfrom$inet(r3, &(0x7f0000000480)=""/231, 0xe7, 0x1, 0x0, 0x0)
r5 = socket$nl_netfilter(0x10, 0x3, 0xc)
sendmsg$IPSET_CMD_CREATE(r5, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000300)={&(0x7f0000000380)={0x58, 0x2, 0x6, 0x401, 0x0, 0x0, {}, [@IPSET_ATTR_DATA={0xc, 0x7, 0x0, 0x1, [@IPSET_ATTR_TIMEOUT={0x8, 0x11}]}, @IPSET_ATTR_PROTOCOL={0x5, 0x1, 0x6}, @IPSET_ATTR_FAMILY={0x5, 0x5, 0x2}, @IPSET_ATTR_REVISION={0x5}, @IPSET_ATTR_SETNAME={0x9, 0x2, 'syz0\x00'}, @IPSET_ATTR_TYPENAME={0x13, 0x3, 'hash:net,iface\x00'}]}, 0x58}}, 0x0)
sendmsg$alg(r3, &(0x7f0000000440)={0x0, 0x0, 0x0, 0x0, &(0x7f0000000400)=[@op={0x18, 0x117, 0x3, 0x1}], 0x18, 0x890}, 0x0)
sendmsg$nl_route_sched_retired(r3, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000280)={&(0x7f0000000300)=@delqdisc={0x24, 0x25, 0x800, 0x70bd2d, 0x25dfdafe, {0x0, 0x0, 0x0, 0x0, {0xd, 0xd}, {0x7, 0x9}, {0xd, 0xffe0}}}, 0x24}, 0x1, 0x0, 0x0, 0x4008044}, 0x0)
socket(0x18, 0x0, 0xc18895e)
getsockopt$inet_sctp_SCTP_DEFAULT_SEND_PARAM(0xffffffffffffffff, 0x84, 0xa, &(0x7f00000000c0)={0x80, 0x3, 0x8009, 0x800, 0x8, 0x9, 0x3, 0xfffffffb, <r6=>0x0}, &(0x7f0000000100)=0x20)
getsockopt$inet_sctp_SCTP_SOCKOPT_CONNECTX3(r3, 0x84, 0x6f, &(0x7f0000000180)={r6, 0x58, &(0x7f0000000340)=[@in={0x2, 0x4e24, @rand_addr=0x64010100}, @in6={0xa, 0x4e20, 0x79e1, @initdev={0xfe, 0x88, '\x00', 0x0, 0x0}, 0x2}, @in={0x2, 0x4e21, @private=0xa010102}, @in6={0xa, 0x4e20, 0xffffffff, @dev={0xfe, 0x80, '\x00', 0x27}, 0x3}]}, &(0x7f00000001c0)=0x10)
r7 = socket$nl_generic(0x10, 0x3, 0x10)
r8 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000240), 0xffffffffffffffff)
ioctl$sock_SIOCGIFINDEX_80211(r7, 0x8933, &(0x7f0000000100)={'wlan1\x00', <r9=>0x0})
r10 = socket$nl_generic(0x10, 0x3, 0x10)
sendmsg$NL80211_CMD_REGISTER_FRAME(r10, &(0x7f0000000340)={0x0, 0x0, &(0x7f0000000580)={&(0x7f0000000600)={0x24, r8, 0x1, 0x0, 0x0, {{}, {@val={0x8, 0x3, r9}, @void}}, [@NL80211_ATTR_FRAME_MATCH={0x5, 0x5b, "ef"}]}, 0x24}, 0x1, 0x0, 0x0, 0x4000}, 0x0)
r11 = socket$nl_generic(0x10, 0x3, 0x10)
r12 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000240), 0xffffffffffffffff)
ioctl$sock_SIOCGIFINDEX_80211(r11, 0x8933, &(0x7f0000000100)={'wlan1\x00', <r13=>0x0})
r14 = socket$nl_generic(0x10, 0x3, 0x10)
sendmsg$NL80211_CMD_REGISTER_FRAME(r14, &(0x7f0000000340)={0x0, 0x0, &(0x7f0000000580)={&(0x7f0000000140)={0x24, r12, 0x1, 0x0, 0x10000, {{}, {@val={0x8, 0x3, r13}, @void}}, [@NL80211_ATTR_FRAME_MATCH={0x5, 0x5b, "1a"}]}, 0x24}, 0x1, 0x0, 0x0, 0x4000}, 0x0)
r15 = socket$kcm(0xa, 0x3, 0x3a)
sendmsg$kcm(r15, &(0x7f0000000080)={&(0x7f0000000000)=@l2tp6={0xa, 0x0, 0x0, @loopback={0x0, 0xac14140c}}, 0x80, &(0x7f00000000c0)=[{&(0x7f0000000140)="8bcd", 0x2}], 0x1, 0x0, 0x0, 0x900}, 0x60)
syz_genetlink_get_family_id$nl80211(&(0x7f0000000040), 0xffffffffffffffff)
sendmsg$nl_route(r1, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000640)=ANY=[@ANYBLOB="340000001000008d000000750db3c110f44a41510196d230d25656919ef06ba2c40fc30f04eb35ca3d2d96c493aafcbcd501dcd7efd5775a09fd5c6558ec11b5cf3db922ce0b537ae918613fbc38cdd02c106f7f44e383615cd6fce2fe235d88f2e42c1128b486a82282f6bdd03228bb0da0ec49d017b479202700cac2000e177db388595ee6080bb403df5da759a41fcd799c1092ecbd5f81afbc1c16024ff4770c08fc51a0cbe7ef46712611", @ANYRES32=r0, @ANYBLOB="00000000d110010014001680100001800c000500fcffffff05000000"], 0x34}, 0x1, 0x0, 0x0, 0x20048051}, 0x40000880)

852.650231ms ago: executing program 3 (id=2710):
r0 = syz_init_net_socket$netrom(0x6, 0x5, 0x0)
socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000080)={0xffffffffffffffff, <r1=>0xffffffffffffffff})
ioctl$sock_SIOCGIFINDEX(r1, 0x8933, &(0x7f0000000000)={'batadv_slave_0\x00'})
r2 = syz_init_net_socket$netrom(0x6, 0x5, 0x0)
r3 = syz_init_net_socket$bt_sco(0x1f, 0x5, 0x2)
setsockopt$ax25_SO_BINDTODEVICE(0xffffffffffffffff, 0x101, 0x19, &(0x7f0000000000)=@bpq0, 0xfffffffffffffe1d)
ioctl$sock_netdev_private(r3, 0x8914, &(0x7f0000000000))
ioctl$sock_netrom_SIOCADDRT(r2, 0x890b, &(0x7f0000000280)={0x1, @remote={0xcc, 0xcc, 0xcc, 0xcc, 0xcc, 0xcc, 0x0}, @bpq0, 0xfffd, 'syz0\x00', @default, 0xfffffdb8, 0x2, [@default, @remote={0xcc, 0xcc, 0xcc, 0xcc, 0xcc, 0xcc, 0x2}, @rose={0xbb, 0xbb, 0xbb, 0x1, 0x0}, @rose={0xbb, 0xbb, 0xbb, 0x1, 0x0}, @remote={0xcc, 0xcc, 0xcc, 0xcc, 0xcc, 0xcc, 0x2}, @default, @rose={0xbb, 0xbb, 0xbb, 0x1, 0x0}, @bcast]})
ioctl$sock_netrom_SIOCADDRT(r2, 0x890b, &(0x7f00000001c0)={0x1, @remote={0xcc, 0xcc, 0xcc, 0xcc, 0xcc, 0xcc, 0x1}, @bpq0, 0x2, 'syz1\x00', @netrom={0xbb, 0xbb, 0xbb, 0xbb, 0xbb, 0x0, 0x0}, 0x5, 0x1, [@netrom={0xbb, 0xbb, 0xbb, 0xbb, 0xbb, 0x0, 0x0}, @rose={0xbb, 0xbb, 0xbb, 0x1, 0x0}, @null, @remote={0xcc, 0xcc, 0xcc, 0xcc, 0xcc, 0xcc, 0x1}, @default, @netrom={0xbb, 0xbb, 0xbb, 0xbb, 0xbb, 0x0, 0x0}, @remote={0xcc, 0xcc, 0xcc, 0xcc, 0xcc, 0xcc, 0x0}, @netrom={0xbb, 0xbb, 0xbb, 0xbb, 0xbb, 0x0, 0x0}]})
r4 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x3, 0x5, &(0x7f0000000000)=ANY=[@ANYBLOB="180000000000000000000000000000008500000022000000850000000500000095"], &(0x7f0000000200)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @sched_cls, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90)
bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000240)={r4, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffd}, 0x50)
ioctl$sock_netrom_SIOCADDRT(r0, 0x890b, &(0x7f0000000000)={0x1, @remote={0xcc, 0xcc, 0xcc, 0xcc, 0xcc, 0xcc, 0x1}, @bpq0, 0x10001, 'syz1\x00', @remote={0xcc, 0xcc, 0xcc, 0xcc, 0xcc, 0xcc, 0x2}, 0x1, 0x0, [@null, @default, @netrom={0xbb, 0xbb, 0xbb, 0xbb, 0xbb, 0x0, 0x0}, @rose={0xbb, 0xbb, 0xbb, 0x1, 0x0}, @bcast, @remote={0xcc, 0xcc, 0xcc, 0xcc, 0xcc, 0xcc, 0x3}, @default, @default]})

849.658945ms ago: executing program 4 (id=2711):
r0 = socket$netlink(0x10, 0x3, 0x0)
sendmsg$nl_route(r0, &(0x7f0000000240)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000340)=ANY=[@ANYBLOB="4c00000010001fff00"/20, @ANYRES32=0x0, @ANYBLOB="0010000000000000240012800b000100697036746e6c000014000280050009002900000008000100", @ANYRES32, @ANYBLOB="08000400000058"], 0x4c}}, 0x0)
ioctl$sock_ipv6_tunnel_SIOCCHGTUNNEL(0xffffffffffffffff, 0x89f3, &(0x7f0000000080)={'syztnl2\x00', &(0x7f0000000000)={'syztnl0\x00', 0x0, 0x29, 0xbb, 0x4, 0x7393, 0x0, @initdev={0xfe, 0x88, '\x00', 0x1, 0x0}, @dev={0xfe, 0x80, '\x00', 0x13}, 0x8000, 0x80, 0x101, 0x95d9}}) (async)
ioctl$sock_ipv6_tunnel_SIOCCHGTUNNEL(0xffffffffffffffff, 0x89f3, &(0x7f0000000080)={'syztnl2\x00', &(0x7f0000000000)={'syztnl0\x00', <r1=>0x0, 0x29, 0xbb, 0x4, 0x7393, 0x0, @initdev={0xfe, 0x88, '\x00', 0x1, 0x0}, @dev={0xfe, 0x80, '\x00', 0x13}, 0x8000, 0x80, 0x101, 0x95d9}})
ioctl$sock_inet6_SIOCDIFADDR(0xffffffffffffffff, 0x8936, &(0x7f0000000100)={@ipv4={'\x00', '\xff\xff', @multicast1}, 0x5c, r1})

759.144956ms ago: executing program 4 (id=2714):
r0 = syz_genetlink_get_family_id$nl802154(&(0x7f0000002600), 0xffffffffffffffff)
r1 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10)
sendmsg$NL802154_CMD_GET_SEC_DEVKEY(r1, &(0x7f00000026c0)={0x0, 0x0, &(0x7f0000002680)={&(0x7f0000000100)={0x14, r0, 0xf21, 0x70bd28, 0x25dfdbfc}, 0x14}, 0x1, 0x0, 0x0, 0x40085}, 0x24008840)
r2 = syz_genetlink_get_family_id$netlbl_unlabel(&(0x7f0000000040), r1)
sendmsg$NLBL_UNLABEL_C_STATICADD(r1, &(0x7f0000000180)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x2000000}, 0xc, &(0x7f0000000140)={&(0x7f0000000080)={0x5c, r2, 0x820, 0x70bd2d, 0x25dfdbfe, {}, [@NLBL_UNLABEL_A_IPV4MASK={0x8, 0x5, @local}, @NLBL_UNLABEL_A_IPV6ADDR={0x14, 0x2, @mcast1}, @NLBL_UNLABEL_A_IPV4ADDR={0x8, 0x4, @loopback}, @NLBL_UNLABEL_A_ACPTFLG={0x5, 0x1, 0x1}, @NLBL_UNLABEL_A_IPV4ADDR={0x8, 0x4, @local}, @NLBL_UNLABEL_A_IPV6MASK={0x14, 0x3, @private2={0xfc, 0x2, '\x00', 0x1}}]}, 0x5c}, 0x1, 0x0, 0x0, 0x800}, 0x20040084)

705.748435ms ago: executing program 3 (id=2715):
bpf$MAP_CREATE_RINGBUF(0x0, &(0x7f00000007c0)=ANY=[@ANYBLOB="1b00000000000000000000000000040000000000", @ANYRES32=0x0, @ANYBLOB='\x00'/20, @ANYRES32=0x0, @ANYRES32=0x0, @ANYBLOB="00000000008000"/28], 0x48)
bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, 0x0, 0x0)
r0 = syz_init_net_socket$ax25(0x3, 0x5, 0xf0)
bind$ax25(r0, &(0x7f00000002c0)={{0x3, @rose={0xbb, 0xbb, 0xbb, 0x1, 0x0}, 0x1}, [@default, @rose={0xbb, 0xbb, 0xbb, 0x1, 0x0}, @netrom={0xbb, 0xbb, 0xbb, 0xbb, 0xbb, 0x0, 0x0}, @null, @bcast, @null, @null, @null]}, 0x48)
sendmsg$nl_generic(0xffffffffffffffff, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000200)={&(0x7f00000002c0)={0x1c, 0x37, 0x800, 0x70bd28, 0x25dfdbfd, {0x17}, [@typed={0x8, 0x142, 0x0, 0x0, @u32=0x7}]}, 0x1c}, 0x1, 0x0, 0x0, 0x24841}, 0x4840)
r1 = socket$nl_generic(0x10, 0x3, 0x10)
r2 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000080), 0xffffffffffffffff)
ioctl$sock_SIOCGIFINDEX_80211(r1, 0x8933, &(0x7f00000000c0)={'wlan0\x00', <r3=>0x0})
sendmsg$NL80211_CMD_START_AP(r1, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000280)=ANY=[@ANYBLOB="80000000", @ANYRES16=r2, @ANYBLOB="050000000000000000000200000008000300", @ANYRES32=r3, @ANYBLOB="2d000e0080000000ffffffffffff08021100000008021100000000000000000000000000640000002503000000000000080026006c09"], 0x80}}, 0x0)
connect$ax25(r0, &(0x7f0000000440)={{0x3, @remote={0xcc, 0xcc, 0xcc, 0xcc, 0xcc, 0xcc, 0x3}}, [@netrom={0xbb, 0xbb, 0xbb, 0xbb, 0xbb, 0x0, 0x0}, @null, @null, @netrom={0xbb, 0xbb, 0xbb, 0xbb, 0xbb, 0x0, 0x0}, @null, @null, @null, @null]}, 0x48)
socket$inet_icmp(0x2, 0x2, 0x1)
r4 = openat$cgroup(0xffffffffffffffff, &(0x7f0000000000)='syz1\x00', 0x200002, 0x0)
openat$cgroup_procs(r4, &(0x7f0000000040)='tasks\x00', 0x2, 0x0)
socket$inet_mptcp(0x2, 0x1, 0x106)
syz_genetlink_get_family_id$nl80211(&(0x7f00000000c0), 0xffffffffffffffff)
close(0xffffffffffffffff)

680.232017ms ago: executing program 2 (id=2716):
r0 = socket$nl_route(0x10, 0x3, 0x0)
sendmsg$nl_route(r0, &(0x7f0000000080)={0x0, 0x0, &(0x7f00000005c0)={&(0x7f0000000540)=@newlink={0x40, 0x10, 0xc3b, 0x0, 0x0, {0x0, 0x0, 0x0, 0x0, 0x0, 0x88a8}, [@IFLA_LINKINFO={0x20, 0x12, 0x0, 0x1, @erspan={{0xb}, {0x10, 0x2, 0x0, 0x1, [@IFLA_GRE_COLLECT_METADATA={0x4}, @IFLA_GRE_ENCAP_SPORT={0x6}]}}}]}, 0x40}}, 0x0)
r1 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10)
ioctl$sock_SIOCGIFINDEX_802154(r1, 0x8933, &(0x7f00000000c0)={'wpan0\x00'})
r2 = syz_init_net_socket$802154_dgram(0x24, 0x2, 0x0)
getsockopt$WPAN_WANTLQI(r2, 0x0, 0x3, &(0x7f0000000000), &(0x7f0000000040)=0x4)

573.776754ms ago: executing program 4 (id=2718):
r0 = socket$inet_tcp(0x2, 0x1, 0x0)
bind$inet(r0, &(0x7f0000000200)={0x2, 0x4e20, @multicast1}, 0x10) (async, rerun: 64)
setsockopt$inet_tcp_int(r0, 0x6, 0x2, &(0x7f0000000040)=0x2800, 0x4) (async, rerun: 64)
connect$inet(r0, &(0x7f0000000000)={0x2, 0x4e20, @dev={0xac, 0x14, 0x14, 0x18}}, 0x10)
r1 = socket(0x10, 0x3, 0x0) (async)
socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000240)={0xffffffffffffffff, <r2=>0xffffffffffffffff})
ioctl$sock_SIOCGIFINDEX(r2, 0x8933, &(0x7f0000000000)={'lo\x00', <r3=>0x0})
r4 = socket$nl_route(0x10, 0x3, 0x0)
setsockopt$netlink_NETLINK_NO_ENOBUFS(r4, 0x10e, 0xc, &(0x7f0000000040)=0x7f, 0x4) (async, rerun: 32)
sendmsg$nl_route(r4, &(0x7f0000000100)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000000)=ANY=[@ANYBLOB="240000001a0001000000ff7f0000000080000000", @ANYRES32], 0x24}, 0x1, 0x0, 0x0, 0x24048081}, 0x0) (async, rerun: 32)
sendmsg$nl_route_sched(r1, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000780)={&(0x7f0000000080)=@newqdisc={0x60, 0x24, 0xd0f, 0x70bd2d, 0x0, {0x60, 0x0, 0x0, r3, {0x0, 0xa}, {0xffff, 0xffff}, {0x0, 0xffff}}, [@qdisc_kind_options=@q_tbf={{0x8}, {0x34, 0x2, [@TCA_TBF_PARMS={0x28, 0x1, {{0xea, 0x0, 0xfffd, 0x0, 0x9, 0x5}, {0x12, 0x2, 0x0, 0x401, 0x8001, 0x1400}, 0xa5, 0x5, 0x10000000}}, @TCA_TBF_BURST={0x8, 0x6, 0x8057}]}}]}, 0x60}}, 0x44080)
sendmsg$nl_route_sched(r1, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000780)={&(0x7f0000000100)=@newqdisc={0x34, 0x24, 0xd0f, 0x70bd2c, 0x25dfdbfb, {0x60, 0x0, 0x0, r3, {}, {0xffe0, 0xa}, {0x1, 0xe}}, [@qdisc_kind_options=@q_codel={{0xa}, {0x4}}]}, 0x34}, 0x1, 0x0, 0x0, 0x55}, 0xc010)
sendmsg$inet(r0, &(0x7f00000015c0)={0x0, 0x14, &(0x7f0000001600)=[{&(0x7f0000000240)=' ', 0xffffff1f}], 0x1}, 0x0)

570.376999ms ago: executing program 2 (id=2719):
r0 = bpf$MAP_CREATE(0x0, &(0x7f0000000600)=@base={0x19, 0x4, 0x8, 0x6}, 0x50)
r1 = bpf$BPF_BTF_LOAD(0x12, &(0x7f00000003c0)={&(0x7f0000000240)=ANY=[@ANYBLOB="9feb010018000000000000000c0000000c000000020000000000000000000004"], 0x0, 0x26}, 0x20)
r2 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0xd, 0x3, &(0x7f0000001740)=ANY=[@ANYBLOB="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"], &(0x7f0000000080)='GPL\x00', 0x5, 0x1f6, &(0x7f00000002c0)=""/168, 0x0, 0x0, '\x00', 0x0, @sock_ops, r1, 0x8, 0x0, 0x0, 0x10, &(0x7f0000000200), 0x1}, 0x6d)
bpf$BPF_BTF_GET_NEXT_ID(0x17, &(0x7f0000000000)={0x0, <r3=>0x0}, 0x8)
r4 = syz_init_net_socket$netrom(0x6, 0x5, 0x0)
socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000080)={<r5=>0xffffffffffffffff, <r6=>0xffffffffffffffff})
ioctl$sock_SIOCGIFINDEX(r6, 0x8933, &(0x7f0000000000)={'batadv_slave_0\x00'})
r7 = syz_init_net_socket$bt_sco(0x1f, 0x5, 0x2)
setsockopt$ax25_SO_BINDTODEVICE(0xffffffffffffffff, 0x101, 0x19, &(0x7f0000000000)=@bpq0, 0x10)
ioctl$sock_netdev_private(r7, 0x8914, &(0x7f0000000000))
close(r5)
r8 = socket(0x2a, 0x2, 0x0)
sendmsg$TIPC_NL_LINK_GET(0xffffffffffffffff, &(0x7f0000000300)={0x0, 0x0, &(0x7f0000000280)={0x0, 0x24}}, 0x0)
getsockname$packet(r8, &(0x7f00000001c0)={0x11, 0x0, <r9=>0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0x14)
r10 = socket$netlink(0x10, 0x3, 0x0)
bind$netlink(r10, &(0x7f0000514ff4)={0x10, 0x0, 0x0, 0x2ffffffff}, 0xc)
sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000280)={&(0x7f0000000380)=@newqdisc={0x2c, 0x24, 0xf0b, 0x0, 0x0, {0x0, 0x0, 0x0, r9, {0x0, 0xffe0}, {0xffff, 0xffff}, {0x0, 0xe}}, [@qdisc_kind_options=@q_drr={0x8}]}, 0x2c}}, 0x40000)
sendmsg$nl_route_sched(r8, &(0x7f0000000340)={0x0, 0x0, &(0x7f0000000500)={&(0x7f0000000000)=@newtfilter={0x4c, 0x2c, 0xd27, 0x0, 0x25dfdc00, {0x0, 0x0, 0x0, r9, {0x5, 0xfff3}, {0x0, 0xffe0}, {0xe, 0x7}}, [@filter_kind_options=@f_fw={{0x7}, {0x20, 0x2, [@TCA_FW_CLASSID={0x8, 0x1, {0xb, 0xffe0}}, @TCA_FW_INDEV={0x14, 0x3, 'veth0_to_batadv\x00'}]}}]}, 0x4c}, 0x1, 0x0, 0x0, 0x8000}, 0x4)
r11 = socket$netlink(0x10, 0x3, 0x0)
sendmmsg(r11, &(0x7f00000002c0), 0x40000000000009f, 0x0)
ioctl$sock_netrom_SIOCADDRT(r4, 0x890b, &(0x7f0000000000)={0x0, @remote={0xcc, 0xcc, 0xcc, 0xcc, 0xcc, 0xcc, 0x1}, @bpq0, 0x4, 'syz1\x00', @default, 0x1, 0x0, [@null, @default, @netrom={0xbb, 0xbb, 0xbb, 0xbb, 0xbb, 0x0, 0x0}, @rose={0xbb, 0xbb, 0xbb, 0x1, 0x0}, @bcast, @remote={0xcc, 0xcc, 0xcc, 0xcc, 0xcc, 0xcc, 0x3}, @remote={0xcc, 0xcc, 0xcc, 0xcc, 0xcc, 0xcc, 0x0}, @default]})
setsockopt$sock_int(0xffffffffffffffff, 0x1, 0x22, 0x0, 0x0)
bind$bt_hci(0xffffffffffffffff, &(0x7f0000000040)={0x1f, 0xffffffffffffffff, 0x2}, 0x6)
r12 = socket$kcm(0x10, 0x2, 0x10)
readv(r12, 0x0, 0x0)
bpf$PROG_LOAD(0x5, &(0x7f0000000180)={0x1c, 0x3, &(0x7f0000000400)=ANY=[@ANYBLOB="18027a0000000000000000003bfaffffffffffffff000000576f0e3133d128a7bfe617a768127afaf98fbe57b0528d72fdbee4"], &(0x7f00000000c0)='GPL\x00', 0x5, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, r3, r2}, 0x94)
bpf$PROG_LOAD(0x5, &(0x7f0000000000)={0x55c4e1d9cb3d45, 0xc, &(0x7f0000000180)=ANY=[@ANYBLOB="1800000020000000000000000000000018110000", @ANYRES32=r0, @ANYBLOB="0000000000000000b7080000000019007b8af8ff00000000bfa200000000000007020000fbffffffb703000008000000b704000000000000850000000100000095"], &(0x7f0000000900)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x11, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, r3, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94)
r13 = syz_init_net_socket$bt_l2cap(0x1f, 0x2, 0x0)
getsockopt$bt_l2cap_L2CAP_LM(r13, 0x6, 0x3, &(0x7f0000000280), &(0x7f0000000380)=0x4)

459.739673ms ago: executing program 2 (id=2721):
r0 = bpf$PROG_LOAD(0x5, &(0x7f0000000600)={0x20, 0x3, &(0x7f0000000200)=@framed, &(0x7f0000000000)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @netfilter=0x2d, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x99ee}, 0x94)
bpf$BPF_LINK_CREATE_XDP(0x1c, &(0x7f0000002380)={r0, 0x0, 0x2d, 0x0, @val=@netfilter={0x2, 0x4, 0x600, 0x1}}, 0x20)
bpf$LINK_GET_NEXT_ID(0x1f, &(0x7f0000000d00)={0x0, <r1=>0x0}, 0x8)
bpf$LINK_GET_FD_BY_ID(0x1e, &(0x7f0000000000)=r1, 0x4)
r2 = bpf$MAP_CREATE(0x0, &(0x7f0000000080)=@bloom_filter={0x1e, 0x2, 0x401, 0x1, 0x10, 0x1, 0x3, '\x00', 0x0, 0xffffffffffffffff, 0x3, 0x4, 0x0, 0xd}, 0x50)
bpf$BPF_GET_MAP_INFO(0xf, &(0x7f0000000180)={r2, 0x0, 0x0}, 0x10)
r3 = bpf$OBJ_GET_MAP(0x7, &(0x7f0000000280)=@generic={&(0x7f0000000240)='./file0\x00', 0x0, 0x10}, 0x18)
r4 = bpf$BPF_BTF_LOAD(0x12, &(0x7f0000000000)={&(0x7f0000000040)=ANY=[@ANYBLOB="9feb01001800000000000000240000002400000002000000000000000000000903000000000000000000000d008d0f61"], &(0x7f0000000100)=""/223, 0xfffffffffffffee0, 0xdf, 0x1}, 0x28)
r5 = bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[], 0x48)
bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x6, 0xc, &(0x7f0000000300)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r5, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bc82000000000000a6020000f8ffffffb703000008000000b707000000000000850000003300000095"], &(0x7f0000000180)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94)
r6 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000180)='memory.events\x00', 0x26e1, 0x0)
bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, &(0x7f0000000280)={{r5}, &(0x7f0000000080), &(0x7f0000000240)=r6}, 0x20)
bpf$PROG_LOAD(0x5, &(0x7f0000000540)={0x0, 0x1c, &(0x7f0000000840)=ANY=[@ANYBLOB="05000000000000009500000000000000b7080000000000007b8af868fb060126ffb7d1c76c6b588056bd54d4c30f55b319ed753745531f733c86984df23f0126c812b7cd13189c1308a70f9f02389d42a8ae02d588331b6e1d52ed9f3d4764677371f27206562eaeef02ec22ea7dfb456c456e915a3d48045e9ea48ec6ab821f76aa2757af190aac67ee27c4bcd393d566923a71264ecbe58cd685972d9fedfa5373d741acf4c7080e5205b3fdaefcc3c76c", @ANYRES32, @ANYBLOB="0000000000002000b70500f7ffffff0085000000a500f6ffb6080000000000007b8af8ff00000000b7080000050000007b8af0ff00000000bfa100000000000007010000f8"], 0x0, 0x1, 0x8d, &(0x7f0000000480)=""/141, 0x41000, 0x0, '\x00', 0x0, @fallback=0x32, r4, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x4, 0x0, &(0x7f0000000980)=[{0x40001, 0x1, 0x2000007}, {0x5, 0x0, 0xf, 0xa}, {0x5, 0x2, 0xe, 0xc}, {0x0, 0x5, 0x0, 0x7}], 0x10, 0xc}, 0x94)
r7 = bpf$MAP_CREATE(0x0, &(0x7f0000000200)=ANY=[@ANYBLOB="0100000005000000090000008b00000044"], 0x48)
bpf$MAP_GET_NEXT_KEY(0x4, &(0x7f00000002c0)={r3, &(0x7f00000003c0)="7d8d95bd5e7913aa55ef8a1547b755dd9ea4ee5106578b176cc2f461152338f3ff2ed18bfae48f68c7dcb6c46176b578ef108520d790bf4250a1a91ce214e6dbcff834d9794344af805889fb2a40f5a71f9c6c826e2f942c0406dcbec8d0611cfe21e046009c66ad2a493853385417b07a3dddbd877adaecffb5bf06c6e654b7f3b43c4a3cae6de9749213857b7b44aeadc7f1c025d0160d9e0aaafc1e5798bd871b80345b10c3049ddadd82b54e1a44bdf8d03902497bed610f6a94b9", &(0x7f00000006c0)=""/254}, 0x20)
ioctl$TUNGETVNETLE(r6, 0x800454dd, &(0x7f0000000380))
bpf$MAP_UPDATE_BATCH(0x1a, &(0x7f0000000300)={0xffffffffffffffff, 0x0, &(0x7f00000000c0), &(0x7f0000000240), 0x800, r7}, 0x38)
bpf$MAP_LOOKUP_BATCH(0x19, &(0x7f0000000800)={0x0, 0x0, &(0x7f0000000680), &(0x7f0000000680), 0x2000006c, r7}, 0x38)

376.422176ms ago: executing program 2 (id=2723):
r0 = bpf$MAP_CREATE(0x100000000000000, &(0x7f0000000040)=ANY=[@ANYBLOB="0a00000009000000080000000200000000000000", @ANYRES32, @ANYBLOB='\x00'/20, @ANYRES32=0x0, @ANYRES32, @ANYBLOB="00000000000000000000000000000000000000000000000000000000d0fe5ecc96b617e3a10c687abfffeec4633f1b018f2311d9383b2afb83468619d42aac654824ffc0b807eb04c207da6248936531eb896c6ebb1f1e4ba1ebf06a1bed51760621fb97833a22f68201c219ef69b3ec2c7fc723cd9c9d7f90b4928a85cca575deb70d95186be5aabd97329080cea59b05fc05b0aa"], 0x48)
bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000340)={0xe, 0x6, &(0x7f0000000180)=@framed={{0x18, 0x2}, [@map_fd={0x18, 0x3, 0x1, 0x0, r0}, @call={0x85, 0x0, 0x0, 0x26}]}, &(0x7f0000000000)='GPL\x00'}, 0x90)

369.693741ms ago: executing program 0 (id=2724):
mkdirat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000)='./cgroup.net/syz0\x00', 0x1ff)
r0 = openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000), 0x200002, 0x0)
mkdirat$cgroup(r0, &(0x7f0000000080)='syz1\x00', 0x1ff)
r1 = openat$cgroup_freezer_state(r0, &(0x7f00000000c0), 0x2, 0x0)
write$cgroup_freezer_state(r1, &(0x7f00000001c0)='FROZEN\x00', 0x7)
r2 = socket$nl_generic(0x10, 0x3, 0x10)
sendmsg$BATADV_CMD_GET_MCAST_FLAGS(r2, &(0x7f0000000200)={&(0x7f0000000040)={0x10, 0x0, 0x0, 0x8000000}, 0xc, &(0x7f0000000180)={&(0x7f0000000100)={0x24, 0x0, 0x2, 0x70bd2d, 0x25dfdbff, {}, [@BATADV_ATTR_ISOLATION_MASK={0x8, 0x2c, 0x6}, @BATADV_ATTR_GW_BANDWIDTH_DOWN={0x8}]}, 0x24}, 0x1, 0x0, 0x0, 0x4000045}, 0x4000804)
write$cgroup_freezer_state(r1, &(0x7f0000000140)='THAWED\x00', 0x7)

265.595381ms ago: executing program 2 (id=2725):
r0 = socket$nl_route(0x10, 0x3, 0x0)
r1 = socket(0x10, 0x3, 0x0)
ioctl$sock_SIOCGIFINDEX(0xffffffffffffffff, 0x8933, &(0x7f00000000c0)={'gretap0\x00', <r2=>0x0})
sendmsg$nl_route_sched(r1, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000140)=@newqdisc={0x48, 0x24, 0xf0b, 0x0, 0x0, {0x60, 0x0, 0x0, r2, {}, {0xffff, 0xffff}}, [@qdisc_kind_options=@q_cake={{0x9}, {0x18, 0x2, [@TCA_CAKE_BASE_RATE64={0xc, 0x2, 0xb}, @TCA_CAKE_DIFFSERV_MODE={0x8, 0x3, 0x4}]}}]}, 0x48}}, 0x0)
sendmsg$nl_route_sched(r0, &(0x7f0000000740)={0x0, 0x0, &(0x7f0000000700)={&(0x7f0000000940)=@newtaction={0x48, 0x76, 0x1, 0x0, 0x0, {0x0, 0x0, 0x300}, [{0x34, 0x1, [@m_vlan={0x30, 0x4, 0x0, 0x0, {{0x9}, {0x4}, {0x4}, {0xc}, {0xc}}}]}]}, 0x48}}, 0x0)
r3 = socket$nl_route(0x10, 0x3, 0x0)
r4 = socket$nl_generic(0x10, 0x3, 0x10)
r5 = syz_genetlink_get_family_id$ethtool(&(0x7f0000000080), 0xffffffffffffffff)
r6 = socket$inet_tcp(0x2, 0x1, 0x0)
setsockopt$inet_tcp_TCP_REPAIR(r6, 0x6, 0x25, &(0x7f00000001c0), 0x4)
ioctl$sock_ipv4_tunnel_SIOCDELTUNNEL(0xffffffffffffffff, 0x89f2, &(0x7f0000000180)={'syztnl1\x00', &(0x7f00000000c0)={'ip_vti0\x00', <r7=>0x0, 0x7, 0x20, 0xfffffff8, 0x7fff, {{0x28, 0x4, 0x1, 0x1, 0xa0, 0x68, 0x0, 0x5, 0x29, 0x0, @rand_addr=0x64010100, @multicast1, {[@lsrr={0x83, 0x13, 0xf, [@multicast2, @broadcast, @dev={0xac, 0x14, 0x14, 0x3e}, @empty]}, @noop, @cipso={0x86, 0x26, 0x3, [{0x7, 0x5, "6dfa52"}, {0x7, 0x10, "781444016863aee7ae043582d2c8"}, {0x2, 0xb, "b83784b4501ac60e19"}]}, @cipso={0x86, 0xf, 0x3, [{0x6, 0x9, "f016eaf21f8be6"}]}, @generic={0x82, 0xc, "ddf42ce05a9cbc248095"}, @timestamp_addr={0x44, 0x34, 0x5b, 0x1, 0x0, [{@multicast2, 0x9}, {@local, 0xffffffff}, {@local, 0x3fc0000}, {@loopback, 0xfffffffb}, {@private=0xa010102, 0x80000001}, {@rand_addr=0x64010101, 0xffffff7f}]}]}}}}})
sendmsg$ETHTOOL_MSG_STRSET_GET(r4, &(0x7f0000000240)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x80}, 0xc, &(0x7f0000000200)={&(0x7f0000000340)=ANY=[@ANYBLOB='(\x00\x00\x00', @ANYRES16=r5, @ANYBLOB="020028bd7000fddbdf250100000014000180080003000200000008000100", @ANYRES32=r7, @ANYBLOB="52ae0e2c9f498bdde07e3513534042f6f683ad8f20eab901bf04451bd662033774ad9a8c6c8af7487919cc6f50c6d96efac7a0a546e3fea3c05f2b610a66a3bca035bb00e1ac1197f6de7ffd90aab310a628dfcfc4a542dd05fc6b36cf7928caceef5744b06c8a59bec7cbaf2e08839009ee8127cf36"], 0x28}}, 0x4041)
sendmsg$nl_route_sched(r3, &(0x7f0000000300)={0x0, 0x0, &(0x7f00000002c0)={&(0x7f0000002a80)=@newtaction={0x8c, 0x30, 0xffff, 0x0, 0x0, {}, [{0x78, 0x1, [@m_police={0x74, 0x1, 0x0, 0x0, {{0xb}, {0x48, 0x2, 0x0, 0x1, [[@TCA_POLICE_TBF={0x3c, 0x1, {0x1000, 0x0, 0x0, 0x0, 0x4000000}}, @TCA_POLICE_RESULT={0x8, 0x5, 0xfffffffe}]]}, {0x4}, {0xc}, {0xc}}}]}]}, 0x8c}}, 0x0)
bpf$PROG_LOAD(0x5, &(0x7f000000e000)={0x10, 0x4, &(0x7f0000000040)=ANY=[], &(0x7f0000003ff6)='GPL\x00', 0x2, 0xc3, &(0x7f000000cf3d)=""/195, 0x0, 0x0, '\x00', 0x0, @sk_msg}, 0x94)

263.963627ms ago: executing program 0 (id=2726):
r0 = socket(0x2a, 0x2, 0x0)
sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f0000000300)={0x0, 0x0, &(0x7f0000000400)={&(0x7f00000005c0)=@newqdisc={0x24}, 0x24}}, 0x0)
getsockname$packet(r0, &(0x7f0000000200)={0x11, 0x0, <r1=>0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000040)=0x14)
sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000280)={&(0x7f0000000440)=@newqdisc={0x44, 0x24, 0xf0b, 0x0, 0x0, {0x0, 0x0, 0x0, r1, {}, {0xffff, 0x8}}, [@qdisc_kind_options=@q_hfsc={{0x9}, {0x14, 0x2, @TCA_HFSC_RSC={0x10, 0x1, {0x97cc, 0x1, 0x5}}}}]}, 0x44}}, 0x0)
sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f0000000340)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000380)=@newtfilter={0x64, 0x2c, 0xd27, 0x0, 0x0, {0x0, 0x0, 0x0, r1, {0xffff, 0x9}, {}, {0x1, 0x6}}, [@filter_kind_options=@f_cgroup={{0x59}, {0x34, 0x2, [@TCA_CGROUP_EMATCHES={0x30, 0x3, 0x0, 0x1, [@TCA_EMATCH_TREE_LIST={0x24, 0x2, 0x0, 0x1, [@TCF_EM_IPT={0x20, 0x1, 0x0, 0x0, {{0x3, 0x9, 0x80}, [@TCA_EM_IPT_HOOK={0x8, 0x1, 0x3}, @TCA_EM_IPT_MATCH_NAME={0xb}]}}]}, @TCA_EMATCH_TREE_HDR={0x8, 0x1, {0x6}}]}]}}]}, 0x64}}, 0x1)
r2 = socket$nl_xfrm(0x10, 0x3, 0x6)
sendmsg$nl_xfrm(r2, &(0x7f0000000480)={0x0, 0x0, &(0x7f0000001f40)={&(0x7f00000004c0)=@updpolicy={0xfc, 0x19, 0x1, 0x0, 0x0, {{@in=@multicast2, @in=@local, 0x0, 0x0, 0x0, 0x0, 0xa, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff}, {0x0, 0xa9, 0x0, 0x0, 0x0, 0xffffffffffffffff}, {0x0, 0xa00, 0x40800000000000, 0x800000000000002}, 0x0, 0x0, 0x0, 0x1}, [@tmpl={0x44, 0x5, [{{@in=@local, 0x0, 0x3c}, 0x0, @in=@broadcast, 0x2, 0x4, 0x3}]}]}, 0xfc}}, 0x0)
r3 = socket$nl_xfrm(0x10, 0x3, 0x6)
sendmsg$nl_xfrm(r3, &(0x7f0000000380)={0x0, 0x0, &(0x7f0000000340)={&(0x7f0000001100)=@migrate={0xa0, 0x21, 0x1, 0x0, 0x0, {{@in6=@private2, @in=@rand_addr=0x64010102, 0x0, 0x0, 0x0, 0x0, 0xa}, 0x4}, [@migrate={0x50, 0x11, [{@in=@local, @in=@broadcast, @in=@multicast2, @in6=@local, 0x3c, 0x4, 0x0, 0x2, 0x2, 0xa}]}]}, 0xa0}, 0x1, 0x0, 0x0, 0x40000}, 0x0)
r4 = socket$netlink(0x10, 0x3, 0x0)
sendmmsg(r4, &(0x7f00000002c0), 0x40000000000009f, 0x0)

246.106471ms ago: executing program 2 (id=2727):
r0 = socket$inet(0x2, 0x1, 0x0)
setsockopt$inet_opts(r0, 0x0, 0x4, 0x0, 0x0)
setsockopt$inet_opts(r0, 0x0, 0x4, 0x0, 0x0)
bpf$PROG_LOAD(0x5, &(0x7f0000000140)={0x10, 0xc, &(0x7f0000000000)=ANY=[@ANYBLOB="18000000000000000000000000000000180d00000000000000000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb7020000080000007b030000faffffff8500000006000000943b00011000000095", @ANYRES16=r0], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x8, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94)
r1 = accept4(r0, &(0x7f0000000280)=@hci, &(0x7f0000000080)=0x80, 0x800)
r2 = socket$inet6(0xa, 0x5, 0x0)
connect$inet6(r2, &(0x7f0000000240)={0xa, 0x4e22, 0x0, @private1}, 0x1c)
getpeername$ax25(r1, &(0x7f0000000380)={{0x3, @bcast}, [@default, @null, @rose, @remote, @rose, @netrom, @default, @rose]}, &(0x7f0000000400)=0x48)
r3 = socket(0xa, 0x3, 0xff)
bpf$PROG_LOAD(0x5, &(0x7f00000017c0)={0x18, 0xe, &(0x7f0000000200)=ANY=[@ANYBLOB="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"], &(0x7f00000001c0)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x8, &(0x7f0000000000), 0x0, 0x10, &(0x7f0000000000), 0xfffffffffffffd00}, 0x48)
setsockopt$inet6_int(r3, 0x29, 0x4d, &(0x7f0000000040)=0xde8, 0x4)
recvmmsg(r3, &(0x7f0000004700)=[{{0x0, 0x0, 0x0}, 0x4f9}], 0x1, 0x0, 0x0)
r4 = socket$inet_tcp(0x2, 0x1, 0x0)
getsockopt$inet_tcp_TCP_REPAIR_WINDOW(r4, 0x6, 0x1d, &(0x7f0000000180), &(0x7f00000001c0)=0x14)
setsockopt(r3, 0xa, 0xffff8001, &(0x7f0000000440)="2929cd2ade4e35b420b96ecba624111d2eff1507066e3b464de68b771f9af48dff6fde9ea0e413cb00429380feaa1519d29e0e5dfc74669a0a3ebc8d4000fa8f3e3bef98cbcade38ff919334bccd840ecffe93cc952e2fa16d8d316ebcdf203ae48e7132fdea6b67588b36054f7533d1f8e0dad1b9ed143a267e7ec830ce4e386777a44e2327b31b34a83aadc62fe1d4544e8e473323965a2e5346b5dfb69a4c328ea62bcc2c372657529416e0cb05c01a3922a3f8d3", 0xb6)
r5 = socket$inet6(0xa, 0x5, 0x0)
r6 = socket$nl_netfilter(0x10, 0x3, 0xc)
sendmsg$NFT_BATCH(r6, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000240)=ANY=[@ANYBLOB="140000001000010000000000000000000500000a28000000000a030000000000000000000a00000708000240000000020900010073797a31000000002c000000030a010100000000000000000a0000070900010073797a31000000000900030073797a320000000014000000110001"], 0x7c}, 0x1, 0x0, 0x0, 0x4000}, 0x0)
sendmsg$NFT_BATCH(r6, &(0x7f0000009b40)={0x0, 0x0, &(0x7f0000009b00)={&(0x7f0000002100)=ANY=[@ANYBLOB="140000001000010000000000000000000500000a5c000000090a010400000000000000000a0000040900010073797a310000000008000540000000040900020073797a310000000008000a40fffffffc200011800e000100636f6e6e6c696d69740000000c00028008000140fffff27414000000110001"], 0x84}, 0x1, 0x0, 0x0, 0x4000850}, 0x40)
sendmsg$NFT_MSG_GETSETELEM(r6, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000200)={0x2c, 0xd, 0xa, 0x301, 0x0, 0x0, {0xa, 0x0, 0x1}, [@NFTA_SET_ELEM_LIST_SET={0x9, 0x2, 'syz1\x00'}, @NFTA_SET_ELEM_LIST_TABLE={0x9, 0x1, 'syz1\x00'}]}, 0x2c}, 0x1, 0x0, 0x0, 0x24000801}, 0x8000)
bind$inet6(r5, &(0x7f0000000140)={0xa, 0x4e20, 0x0, @ipv4={'\x00', '\xff\xff', @local}}, 0x1c)
r7 = socket$inet6(0xa, 0x5, 0x0)
syz_emit_ethernet(0xe, &(0x7f00000018c0)={@random="a581e4cba1fd", @dev={'\xaa\xaa\xaa\xaa\xaa', 0x14}, @void, {@generic={0x88f7}}}, 0x0)
recvfrom$l2tp(r3, &(0x7f0000000500)=""/227, 0xe3, 0x12003, &(0x7f0000000600)={0x2, 0x0, @remote}, 0x10)
bind$inet6(r7, &(0x7f0000000140)={0xa, 0x4e20, 0x0, @ipv4={'\x00', '\xff\xff', @dev={0xac, 0x14, 0x14, 0x41}}}, 0x1c)
connect$inet6(r7, &(0x7f0000000300)={0xa, 0x4e21, 0x2, @private1, 0x5}, 0x1c)
r8 = bpf$BPF_MAP_GET_FD_BY_ID(0xe, &(0x7f00000008c0)={0x0, 0x8, 0x10}, 0xc)
bpf$MAP_UPDATE_ELEM(0x2, &(0x7f0000000a00)={r8, &(0x7f0000000900)="4717814b7b36fd054e90dc4f43fd12ea7e921b2b6f635f2356c58314ed4dfec68348d7fa1b1a062db2ec83a75b9270f93ec85c39770f5dfd38ced6c7152b9692f18d59dba092fd420f900a32a1282782de5d4e0546f4904e2fbbc03e7094fa835c6adc0f682b6d8062f8b706659916504c3fa33efef883305fc60a59eb3f4c8cbb63915c895ece", &(0x7f00000009c0)=@udp6=r1, 0x2}, 0x20)
r9 = socket$netlink(0x10, 0x3, 0x4)
writev(r9, &(0x7f0000000200)=[{&(0x7f0000000140)="480000001400190d09004beafd0d8c560a84476080ffe00600000000590000a2bc5603ca00000f7f89000000200000000101ff0000000309ff5bffff00c7e5ed5e00000000000000", 0x48}], 0x1)

196.392555ms ago: executing program 0 (id=2728):
r0 = socket$nl_generic(0x10, 0x3, 0x10)
syz_genetlink_get_family_id$SEG6(&(0x7f0000000080), 0xffffffffffffffff) (async)
r1 = syz_genetlink_get_family_id$SEG6(&(0x7f0000000080), 0xffffffffffffffff)
r2 = syz_genetlink_get_family_id$ipvs(&(0x7f0000000040), r0)
sendmsg$IPVS_CMD_DEL_SERVICE(r0, &(0x7f0000000200)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x800}, 0xc, &(0x7f0000000180)={&(0x7f0000000380)={0x7c, r2, 0x200, 0x70bd29, 0x25dfdbfe, {}, [@IPVS_CMD_ATTR_TIMEOUT_UDP={0x8, 0x6, 0x7}, @IPVS_CMD_ATTR_DAEMON={0x14, 0x3, 0x0, 0x1, [@IPVS_DAEMON_ATTR_MCAST_GROUP={0x8, 0x5, @multicast1}, @IPVS_DAEMON_ATTR_SYNC_ID={0x8, 0x3, 0x2}]}, @IPVS_CMD_ATTR_DEST={0x4}, @IPVS_CMD_ATTR_SERVICE={0x40, 0x1, 0x0, 0x1, [@IPVS_SVC_ATTR_FLAGS={0xc, 0x7, {0x25, 0x10}}, @IPVS_SVC_ATTR_ADDR={0x14, 0x3, @ipv4=@local}, @IPVS_SVC_ATTR_TIMEOUT={0x8, 0x8, 0xc12}, @IPVS_SVC_ATTR_FLAGS={0xc, 0x7, {0x21, 0x12}}, @IPVS_SVC_ATTR_PROTOCOL={0x6, 0x2, 0x3b}]}, @IPVS_CMD_ATTR_TIMEOUT_TCP={0x8, 0x4, 0x6b3}]}, 0x7c}, 0x1, 0x0, 0x0, 0x10}, 0x4000040)
r3 = syz_genetlink_get_family_id$tipc2(&(0x7f0000000240), r0)
sendmsg$TIPC_NL_KEY_SET(r0, &(0x7f00000002c0)={&(0x7f0000000140)={0x10, 0x0, 0x0, 0x20}, 0xc, &(0x7f0000000280)={&(0x7f0000000500)={0x5f0, r3, 0x300, 0x70bd2d, 0x25dfdbfb, {}, [@TIPC_NLA_MON={0x2c, 0x9, 0x0, 0x1, [@TIPC_NLA_MON_ACTIVATION_THRESHOLD={0x8, 0x1, 0x1}, @TIPC_NLA_MON_REF={0x8, 0x2, 0xa7}, @TIPC_NLA_MON_ACTIVATION_THRESHOLD={0x8, 0x1, 0x800}, @TIPC_NLA_MON_ACTIVATION_THRESHOLD={0x8, 0x1, 0x8}, @TIPC_NLA_MON_REF={0x8, 0x2, 0x400000}]}, @TIPC_NLA_BEARER={0xec, 0x1, 0x0, 0x1, [@TIPC_NLA_BEARER_PROP={0x4c, 0x2, 0x0, 0x1, [@TIPC_NLA_PROP_MTU={0x8}, @TIPC_NLA_PROP_WIN={0x8, 0x3, 0x8}, @TIPC_NLA_PROP_MTU={0x8, 0x4, 0x2}, @TIPC_NLA_PROP_WIN={0x8, 0x3, 0x2}, @TIPC_NLA_PROP_TOL={0x8, 0x2, 0x80000001}, @TIPC_NLA_PROP_WIN={0x8, 0x3, 0x9}, @TIPC_NLA_PROP_WIN={0x8, 0x3, 0x80000000}, @TIPC_NLA_PROP_PRIO={0x8, 0x1, 0x14}, @TIPC_NLA_PROP_TOL={0x8, 0x2, 0x108966ac}]}, @TIPC_NLA_BEARER_DOMAIN={0x8, 0x3, 0xd}, @TIPC_NLA_BEARER_NAME={0xd, 0x1, @udp='udp:syz0\x00'}, @TIPC_NLA_BEARER_UDP_OPTS={0x44, 0x4, {{0x20, 0x1, @in6={0xa, 0x4e21, 0x0, @empty}}, {0x20, 0x2, @in6={0xa, 0x4e21, 0x7, @dev={0xfe, 0x80, '\x00', 0x29}, 0x2}}}}, @TIPC_NLA_BEARER_UDP_OPTS={0x38, 0x4, {{0x14, 0x1, @in={0x2, 0x4e20, @rand_addr=0x64010102}}, {0x20, 0x2, @in6={0xa, 0x4e24, 0x400, @private2={0xfc, 0x2, '\x00', 0x1}}}}}, @TIPC_NLA_BEARER_DOMAIN={0x8, 0x3, 0xb}]}, @TIPC_NLA_MON={0x1c, 0x9, 0x0, 0x1, [@TIPC_NLA_MON_ACTIVATION_THRESHOLD={0x8, 0x1, 0x4}, @TIPC_NLA_MON_REF={0x8, 0x2, 0x6}, @TIPC_NLA_MON_ACTIVATION_THRESHOLD={0x8}]}, @TIPC_NLA_LINK={0x10, 0x4, 0x0, 0x1, [@TIPC_NLA_LINK_NAME={0x9, 0x1, 'syz1\x00'}]}, @TIPC_NLA_NODE={0x24, 0x6, 0x0, 0x1, [@TIPC_NLA_NODE_ADDR={0x8, 0x1, 0x4}, @TIPC_NLA_NODE_REKEYING={0x8, 0x6, 0xf1}, @TIPC_NLA_NODE_REKEYING={0x8, 0x6, 0x800}, @TIPC_NLA_NODE_ADDR={0x8, 0x1, 0xfffffff8}]}, @TIPC_NLA_NODE={0x130, 0x6, 0x0, 0x1, [@TIPC_NLA_NODE_KEY={0x44, 0x4, {'gcm(aes)\x00', 0x1c, "b8e97ca18a2396dfb90a106329adb3c94f5b81a56f6dcfaefc9ec9a3"}}, @TIPC_NLA_NODE_KEY={0x3f, 0x4, {'gcm(aes)\x00', 0x17, "764fc25cdc60ed52514df47c0497c7fa1906d88624cfa7"}}, @TIPC_NLA_NODE_ADDR={0x8, 0x1, 0xfffffffd}, @TIPC_NLA_NODE_ID={0x9f, 0x3, "0f73ec5eb9a342543a044e54e682a554ec8c6557f0a8a6b321cdfc24a56bdbf44f928cf2671f330b727db9da1ed49897194b957bd2b3a150985f05f7ef6801d53375729f144462cf43f9c9f211a9473f164cd0e450645e8ac353dacb0782e1f14bf813698e6b9c0d60b4a7b1d25c2e02f163db49e5536486ee4d3b54da83524be01671b12cbcd6a623aa30f48d3072fd2ae2d0537040297a26ebb5"}]}, @TIPC_NLA_BEARER={0x50, 0x1, 0x0, 0x1, [@TIPC_NLA_BEARER_DOMAIN={0x8, 0x3, 0x5}, @TIPC_NLA_BEARER_UDP_OPTS={0x44, 0x4, {{0x20, 0x1, @in6={0xa, 0x4e23, 0x234e, @loopback, 0xa}}, {0x20, 0x2, @in6={0xa, 0x4e22, 0x81, @remote, 0x1}}}}]}, @TIPC_NLA_NODE={0x1e4, 0x6, 0x0, 0x1, [@TIPC_NLA_NODE_REKEYING={0x8, 0x6, 0xfffffffb}, @TIPC_NLA_NODE_ID={0x50, 0x3, "7e8ec8efd82c9f126df7c789f836d01e8751b847f09fb3fc80d27756151e532b175c78bc2a67281016358f0c5febb81dc9da602f518a70e0e9d031dab0890f279c26f8910d54dba075b00e96"}, @TIPC_NLA_NODE_ID={0xe4, 0x3, "f9a212006d0c45e8bd168ba07b0bfcba05b631e744cc0b709b3359f4570e8c6ee9d8e83439176b59de4dfcddfd410f9bf2ae34f1ab434851a1dbbd867d25ef0b78d42524800c1dce21a8b8fe00e8c61fde60f951e04403d1487f87031b896211b7ac4672032562ca5f35ff786964e2d190c432bdcabd4d1cebff8df7aa2d61552e2b503d1be370822af74721232f3a56a3215ef40302f12c8174b657342e4f855fb03e0d296cfeba9ec6c7532af10ba355391c2bf6e7dba7ee7c4839ff6b9779bb8a3c84968d38b3afe9c66c5d1529517271316c413d1f16b1306025827dd8cb"}, @TIPC_NLA_NODE_ID={0x9c, 0x3, "7de5e48caa298eff0a5e5ded09ce00e72fab2c0d3b9ddb617491a2fc28d44ff5a64e363266a523a4b1a77edc73a460604c2b3beab29a13676ab65e470a6cec9220f1f240874681bd667c168f8b0901353b11c4b9414b6f893377bb26b9a66f651e66253973d6d113a1c2be1925be8486030d37227dec737287db6441303c4ba936157a90bf9e50eb6db27515360ac6def0694c40264a717c"}, @TIPC_NLA_NODE_ADDR={0x8, 0x1, 0x6}]}, @TIPC_NLA_LINK={0x110, 0x4, 0x0, 0x1, [@TIPC_NLA_LINK_PROP={0xc, 0x7, 0x0, 0x1, [@TIPC_NLA_PROP_PRIO={0x8, 0x1, 0x1d}]}, @TIPC_NLA_LINK_PROP={0x34, 0x7, 0x0, 0x1, [@TIPC_NLA_PROP_MTU={0x8, 0x4, 0x80000}, @TIPC_NLA_PROP_MTU={0x8, 0x4, 0x6}, @TIPC_NLA_PROP_PRIO={0x8, 0x1, 0x6}, @TIPC_NLA_PROP_WIN={0x8, 0x3, 0x10001}, @TIPC_NLA_PROP_PRIO={0x8, 0x1, 0xd}, @TIPC_NLA_PROP_MTU={0x8, 0x4, 0x3}]}, @TIPC_NLA_LINK_PROP={0x44, 0x7, 0x0, 0x1, [@TIPC_NLA_PROP_PRIO={0x8, 0x1, 0x3}, @TIPC_NLA_PROP_WIN={0x8, 0x3, 0x1}, @TIPC_NLA_PROP_MTU={0x8, 0x4, 0x58e6}, @TIPC_NLA_PROP_MTU={0x8}, @TIPC_NLA_PROP_MTU={0x8, 0x4, 0x9}, @TIPC_NLA_PROP_TOL={0x8, 0x2, 0x6}, @TIPC_NLA_PROP_PRIO={0x8, 0x1, 0x9}, @TIPC_NLA_PROP_MTU={0x8, 0x4, 0x6}]}, @TIPC_NLA_LINK_PROP={0x14, 0x7, 0x0, 0x1, [@TIPC_NLA_PROP_WIN={0x8, 0x3, 0xfffff377}, @TIPC_NLA_PROP_PRIO={0x8, 0x1, 0xc}]}, @TIPC_NLA_LINK_PROP={0x54, 0x7, 0x0, 0x1, [@TIPC_NLA_PROP_MTU={0x8, 0x4, 0x6}, @TIPC_NLA_PROP_TOL={0x8, 0x2, 0x9}, @TIPC_NLA_PROP_WIN={0x8, 0x3, 0x5169}, @TIPC_NLA_PROP_WIN={0x8, 0x3, 0xda63}, @TIPC_NLA_PROP_MTU={0x8}, @TIPC_NLA_PROP_PRIO={0x8, 0x1, 0x1d}, @TIPC_NLA_PROP_PRIO={0x8, 0x1, 0x19}, @TIPC_NLA_PROP_PRIO={0x8, 0x1, 0x1c}, @TIPC_NLA_PROP_WIN={0x8, 0x3, 0x4}, @TIPC_NLA_PROP_TOL={0x8, 0x2, 0x2}]}, @TIPC_NLA_LINK_NAME={0x9, 0x1, 'syz1\x00'}, @TIPC_NLA_LINK_NAME={0x13, 0x1, 'broadcast-link\x00'}]}]}, 0x5f0}}, 0x20000080) (async)
sendmsg$TIPC_NL_KEY_SET(r0, &(0x7f00000002c0)={&(0x7f0000000140)={0x10, 0x0, 0x0, 0x20}, 0xc, &(0x7f0000000280)={&(0x7f0000000500)={0x5f0, r3, 0x300, 0x70bd2d, 0x25dfdbfb, {}, [@TIPC_NLA_MON={0x2c, 0x9, 0x0, 0x1, [@TIPC_NLA_MON_ACTIVATION_THRESHOLD={0x8, 0x1, 0x1}, @TIPC_NLA_MON_REF={0x8, 0x2, 0xa7}, @TIPC_NLA_MON_ACTIVATION_THRESHOLD={0x8, 0x1, 0x800}, @TIPC_NLA_MON_ACTIVATION_THRESHOLD={0x8, 0x1, 0x8}, @TIPC_NLA_MON_REF={0x8, 0x2, 0x400000}]}, @TIPC_NLA_BEARER={0xec, 0x1, 0x0, 0x1, [@TIPC_NLA_BEARER_PROP={0x4c, 0x2, 0x0, 0x1, [@TIPC_NLA_PROP_MTU={0x8}, @TIPC_NLA_PROP_WIN={0x8, 0x3, 0x8}, @TIPC_NLA_PROP_MTU={0x8, 0x4, 0x2}, @TIPC_NLA_PROP_WIN={0x8, 0x3, 0x2}, @TIPC_NLA_PROP_TOL={0x8, 0x2, 0x80000001}, @TIPC_NLA_PROP_WIN={0x8, 0x3, 0x9}, @TIPC_NLA_PROP_WIN={0x8, 0x3, 0x80000000}, @TIPC_NLA_PROP_PRIO={0x8, 0x1, 0x14}, @TIPC_NLA_PROP_TOL={0x8, 0x2, 0x108966ac}]}, @TIPC_NLA_BEARER_DOMAIN={0x8, 0x3, 0xd}, @TIPC_NLA_BEARER_NAME={0xd, 0x1, @udp='udp:syz0\x00'}, @TIPC_NLA_BEARER_UDP_OPTS={0x44, 0x4, {{0x20, 0x1, @in6={0xa, 0x4e21, 0x0, @empty}}, {0x20, 0x2, @in6={0xa, 0x4e21, 0x7, @dev={0xfe, 0x80, '\x00', 0x29}, 0x2}}}}, @TIPC_NLA_BEARER_UDP_OPTS={0x38, 0x4, {{0x14, 0x1, @in={0x2, 0x4e20, @rand_addr=0x64010102}}, {0x20, 0x2, @in6={0xa, 0x4e24, 0x400, @private2={0xfc, 0x2, '\x00', 0x1}}}}}, @TIPC_NLA_BEARER_DOMAIN={0x8, 0x3, 0xb}]}, @TIPC_NLA_MON={0x1c, 0x9, 0x0, 0x1, [@TIPC_NLA_MON_ACTIVATION_THRESHOLD={0x8, 0x1, 0x4}, @TIPC_NLA_MON_REF={0x8, 0x2, 0x6}, @TIPC_NLA_MON_ACTIVATION_THRESHOLD={0x8}]}, @TIPC_NLA_LINK={0x10, 0x4, 0x0, 0x1, [@TIPC_NLA_LINK_NAME={0x9, 0x1, 'syz1\x00'}]}, @TIPC_NLA_NODE={0x24, 0x6, 0x0, 0x1, [@TIPC_NLA_NODE_ADDR={0x8, 0x1, 0x4}, @TIPC_NLA_NODE_REKEYING={0x8, 0x6, 0xf1}, @TIPC_NLA_NODE_REKEYING={0x8, 0x6, 0x800}, @TIPC_NLA_NODE_ADDR={0x8, 0x1, 0xfffffff8}]}, @TIPC_NLA_NODE={0x130, 0x6, 0x0, 0x1, [@TIPC_NLA_NODE_KEY={0x44, 0x4, {'gcm(aes)\x00', 0x1c, "b8e97ca18a2396dfb90a106329adb3c94f5b81a56f6dcfaefc9ec9a3"}}, @TIPC_NLA_NODE_KEY={0x3f, 0x4, {'gcm(aes)\x00', 0x17, "764fc25cdc60ed52514df47c0497c7fa1906d88624cfa7"}}, @TIPC_NLA_NODE_ADDR={0x8, 0x1, 0xfffffffd}, @TIPC_NLA_NODE_ID={0x9f, 0x3, "0f73ec5eb9a342543a044e54e682a554ec8c6557f0a8a6b321cdfc24a56bdbf44f928cf2671f330b727db9da1ed49897194b957bd2b3a150985f05f7ef6801d53375729f144462cf43f9c9f211a9473f164cd0e450645e8ac353dacb0782e1f14bf813698e6b9c0d60b4a7b1d25c2e02f163db49e5536486ee4d3b54da83524be01671b12cbcd6a623aa30f48d3072fd2ae2d0537040297a26ebb5"}]}, @TIPC_NLA_BEARER={0x50, 0x1, 0x0, 0x1, [@TIPC_NLA_BEARER_DOMAIN={0x8, 0x3, 0x5}, @TIPC_NLA_BEARER_UDP_OPTS={0x44, 0x4, {{0x20, 0x1, @in6={0xa, 0x4e23, 0x234e, @loopback, 0xa}}, {0x20, 0x2, @in6={0xa, 0x4e22, 0x81, @remote, 0x1}}}}]}, @TIPC_NLA_NODE={0x1e4, 0x6, 0x0, 0x1, [@TIPC_NLA_NODE_REKEYING={0x8, 0x6, 0xfffffffb}, @TIPC_NLA_NODE_ID={0x50, 0x3, "7e8ec8efd82c9f126df7c789f836d01e8751b847f09fb3fc80d27756151e532b175c78bc2a67281016358f0c5febb81dc9da602f518a70e0e9d031dab0890f279c26f8910d54dba075b00e96"}, @TIPC_NLA_NODE_ID={0xe4, 0x3, "f9a212006d0c45e8bd168ba07b0bfcba05b631e744cc0b709b3359f4570e8c6ee9d8e83439176b59de4dfcddfd410f9bf2ae34f1ab434851a1dbbd867d25ef0b78d42524800c1dce21a8b8fe00e8c61fde60f951e04403d1487f87031b896211b7ac4672032562ca5f35ff786964e2d190c432bdcabd4d1cebff8df7aa2d61552e2b503d1be370822af74721232f3a56a3215ef40302f12c8174b657342e4f855fb03e0d296cfeba9ec6c7532af10ba355391c2bf6e7dba7ee7c4839ff6b9779bb8a3c84968d38b3afe9c66c5d1529517271316c413d1f16b1306025827dd8cb"}, @TIPC_NLA_NODE_ID={0x9c, 0x3, "7de5e48caa298eff0a5e5ded09ce00e72fab2c0d3b9ddb617491a2fc28d44ff5a64e363266a523a4b1a77edc73a460604c2b3beab29a13676ab65e470a6cec9220f1f240874681bd667c168f8b0901353b11c4b9414b6f893377bb26b9a66f651e66253973d6d113a1c2be1925be8486030d37227dec737287db6441303c4ba936157a90bf9e50eb6db27515360ac6def0694c40264a717c"}, @TIPC_NLA_NODE_ADDR={0x8, 0x1, 0x6}]}, @TIPC_NLA_LINK={0x110, 0x4, 0x0, 0x1, [@TIPC_NLA_LINK_PROP={0xc, 0x7, 0x0, 0x1, [@TIPC_NLA_PROP_PRIO={0x8, 0x1, 0x1d}]}, @TIPC_NLA_LINK_PROP={0x34, 0x7, 0x0, 0x1, [@TIPC_NLA_PROP_MTU={0x8, 0x4, 0x80000}, @TIPC_NLA_PROP_MTU={0x8, 0x4, 0x6}, @TIPC_NLA_PROP_PRIO={0x8, 0x1, 0x6}, @TIPC_NLA_PROP_WIN={0x8, 0x3, 0x10001}, @TIPC_NLA_PROP_PRIO={0x8, 0x1, 0xd}, @TIPC_NLA_PROP_MTU={0x8, 0x4, 0x3}]}, @TIPC_NLA_LINK_PROP={0x44, 0x7, 0x0, 0x1, [@TIPC_NLA_PROP_PRIO={0x8, 0x1, 0x3}, @TIPC_NLA_PROP_WIN={0x8, 0x3, 0x1}, @TIPC_NLA_PROP_MTU={0x8, 0x4, 0x58e6}, @TIPC_NLA_PROP_MTU={0x8}, @TIPC_NLA_PROP_MTU={0x8, 0x4, 0x9}, @TIPC_NLA_PROP_TOL={0x8, 0x2, 0x6}, @TIPC_NLA_PROP_PRIO={0x8, 0x1, 0x9}, @TIPC_NLA_PROP_MTU={0x8, 0x4, 0x6}]}, @TIPC_NLA_LINK_PROP={0x14, 0x7, 0x0, 0x1, [@TIPC_NLA_PROP_WIN={0x8, 0x3, 0xfffff377}, @TIPC_NLA_PROP_PRIO={0x8, 0x1, 0xc}]}, @TIPC_NLA_LINK_PROP={0x54, 0x7, 0x0, 0x1, [@TIPC_NLA_PROP_MTU={0x8, 0x4, 0x6}, @TIPC_NLA_PROP_TOL={0x8, 0x2, 0x9}, @TIPC_NLA_PROP_WIN={0x8, 0x3, 0x5169}, @TIPC_NLA_PROP_WIN={0x8, 0x3, 0xda63}, @TIPC_NLA_PROP_MTU={0x8}, @TIPC_NLA_PROP_PRIO={0x8, 0x1, 0x1d}, @TIPC_NLA_PROP_PRIO={0x8, 0x1, 0x19}, @TIPC_NLA_PROP_PRIO={0x8, 0x1, 0x1c}, @TIPC_NLA_PROP_WIN={0x8, 0x3, 0x4}, @TIPC_NLA_PROP_TOL={0x8, 0x2, 0x2}]}, @TIPC_NLA_LINK_NAME={0x9, 0x1, 'syz1\x00'}, @TIPC_NLA_LINK_NAME={0x13, 0x1, 'broadcast-link\x00'}]}]}, 0x5f0}}, 0x20000080)
sendmsg$SEG6_CMD_SETHMAC(r0, &(0x7f00000004c0)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f00000000c0)={0x30, r1, 0x1, 0x0, 0x0, {}, [@SEG6_ATTR_SECRETLEN={0x5, 0x5, 0x1}, @SEG6_ATTR_SECRET={0x4}, @SEG6_ATTR_ALGID={0x5}, @SEG6_ATTR_HMACKEYID={0x8, 0x3, 0x1}]}, 0x30}}, 0x0)

109.760453ms ago: executing program 0 (id=2729):
r0 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000040)='cpuacct.usage_sys\x00', 0x275a, 0x0)
mmap(&(0x7f0000000000/0x400000)=nil, 0x400000, 0x1, 0x10012, r0, 0x0)
r1 = socket$inet6_sctp(0xa, 0x5, 0x84)
setsockopt$inet_sctp6_SCTP_DISABLE_FRAGMENTS(r1, 0x84, 0x8, 0x0, 0x0)
r2 = socket$pppoe(0x18, 0x1, 0x0)
connect$pppoe(r2, &(0x7f0000000400)={0x18, 0x0, {0x2, @dev={'\xaa\xaa\xaa\xaa\xaa', 0xa}, 'ip6tnl0\x00'}}, 0x1e)
sendmmsg(r2, &(0x7f0000000880)=[{{0x0, 0x0, 0x0}}], 0x1, 0x20040000)
r3 = socket(0xa, 0x1, 0x0)
ioctl(r3, 0x8936, 0x0)
r4 = socket$nl_route(0x10, 0x3, 0x0)
ioctl$ifreq_SIOCGIFINDEX_batadv_hard(r3, 0x8933, &(0x7f00000000c0)={'batadv_slave_1\x00', <r5=>0x0})
getsockopt$inet_IP_XFRM_POLICY(r3, 0x0, 0x11, &(0x7f0000000100)={{{@in, @in6, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, <r6=>0x0}}, {{@in=@initdev}, 0x0, @in=@empty}}, &(0x7f0000000200)=0xe8)
sendmsg$nl_xfrm(r0, &(0x7f0000000400)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x20000000}, 0xc, &(0x7f0000000240)={&(0x7f0000000440)=ANY=[@ANYBLOB="140100002100000227bd7000ff8e0d00000000000000000000000000eb700000ac1e00112ad98aac6788af030b1514dc9099bc7adbb49752a8c50000000000000000fad310ac93ea27f0c1f486349a9f78198b2d5bbfca18d805c10d9b719fabf6104ad683a0b58c7500196092b979fa1d7d94449ac003652e05e73337203679726630ddb14c6c59a77e8157c85200862089e1e12f1bcc39201cb8dfb6c264ec7e", @ANYRES32=r5, @ANYRES32=r6, @ANYBLOB="b76b6e0000000000c4000500ac1e0101000000000000000000000000000004d2ff00000002000000ffffffff000000000000000000000000043500000301fa0002000000fdffffff05000000ac1414aa000000000000000000000000000004d43300000002000000fe8000000000000000000000000000aa000000000402720085b59f480600000007000000ff010000000000000000000000000001000004d3ff00000002000000e00000010000000000000000000000000235000002005d00080000000300000002000000"], 0x114}, 0x1, 0x0, 0x0, 0x40}, 0x1)
r7 = socket$nl_route(0x10, 0x3, 0x0)
sendmsg$nl_route(r7, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000001140)={&(0x7f0000001500)=@newlink={0x44, 0x10, 0x503, 0x0, 0x0, {}, [@IFLA_LINKINFO={0x24, 0x12, 0x0, 0x1, @gre={{0x8}, {0x18, 0x2, 0x0, 0x1, [@IFLA_GRE_OFLAGS={0x6, 0x3, 0x1}, @IFLA_GRE_COLLECT_METADATA={0x4}, @IFLA_GRE_ENCAP_TYPE={0x6}]}}}]}, 0x44}}, 0x0)
sendmsg$nl_route(r4, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000080)=@newlink={0x3c, 0x10, 0x49920d862a92153b, 0x0, 0x0, {0x0, 0x0, 0x0, 0x0, 0x0, 0x20000}, [@IFLA_WEIGHT, @IFLA_MTU={0x8, 0x4, 0x60}]}, 0x3c}}, 0x0)

74.716025ms ago: executing program 0 (id=2730):
r0 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000040)='cpuset.effective_cpus\x00', 0x275a, 0x0)
ioctl$FS_IOC_SETFLAGS(r0, 0x40086602, &(0x7f0000000080)=0x20)
openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000040)='cpuset.effective_cpus\x00', 0x275a, 0x0)
r1 = bpf$MAP_CREATE(0x0, &(0x7f00000004c0)=@base={0xa, 0x4, 0x4, 0x9}, 0x48)
bpf$PROG_LOAD(0x5, &(0x7f0000000000)={0x13, 0x8, &(0x7f0000000940)=ANY=[@ANYBLOB="1809000000000000000000000000000018120000", @ANYRES32=r1, @ANYBLOB="0000000000000000b7030000070400008500000021000000b70000000000000095"], &(0x7f0000000180)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90)

71.036619ms ago: executing program 1 (id=2731):
ioctl$sock_SIOCGIFINDEX(0xffffffffffffffff, 0x8933, 0x0)
setsockopt$inet_int(0xffffffffffffffff, 0x0, 0x18, &(0x7f0000000080)=0x5, 0x4)
r0 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f00000007c0)={0x18, 0x14, &(0x7f0000000880)=ANY=[@ANYBLOB="1800000006000000000000000d0000008520000005000000180100002020782500000000002020207b1af8ff00000000bfa100000007010000f8ffffffb702000008000000b70300000200000085000000060000001811000000000016c5b948b06140a058a22277521a26cefedf4f374b17a87c50d1a2f59ccb38e080e664385a1d1f65a4f6cd76db8ed2f0d25ebebb16f6504c0e44fd23fc5afdc9844f9500a9fa9d7c75d7192d6fec43f2ec7c165d8309e44b", @ANYRES32=0x1, @ANYBLOB="0000000000000000b7020000000000008500000086000000"], 0x0, 0x7fff, 0x0, 0x0, 0x41000, 0x13, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, &(0x7f00000004c0)={0x4, 0xd, 0xfffff469}, 0x10, 0x0, 0x0, 0x0, &(0x7f0000000200)=[0x1, 0xffffffffffffffff, 0xffffffffffffffff], &(0x7f00000005c0), 0x10, 0x3fd}, 0x94)
bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000740)={&(0x7f0000000240)='bcache_invalidate\x00', r0, 0x0, 0x3}, 0x18)
r1 = socket$inet_mptcp(0x2, 0x1, 0x106)
listen(r1, 0x0)
socket$can_bcm(0x1d, 0x2, 0x2)
poll(&(0x7f0000000180)=[{r1, 0x224}], 0x1, 0x11ff)
shutdown(r1, 0x0)
syz_init_net_socket$nl_generic(0x10, 0x3, 0x10)
sendmsg$NLBL_CIPSOV4_C_ADD(0xffffffffffffffff, &(0x7f0000000580)={0x0, 0x0, &(0x7f0000000540)={&(0x7f0000006040)=ANY=[@ANYRES16, @ANYBLOB="010000000000000000000100000004000480080002000100000008000100000000000400088048010c8054000b800800090000000000080009000000000008000a000000000008000a000000000008000a0000000000080009000000000008000a000000000008000a000000000008000a"], 0x174}}, 0x0)
mmap(&(0x7f0000001000/0xc00000)=nil, 0xc00000, 0x0, 0x12, 0xffffffffffffffff, 0xbdd94000)
ioctl$EXT4_IOC_GROUP_ADD(r0, 0x40286608, &(0x7f0000000000)={0x4, 0x7, 0x100, 0xe, 0x7ff, 0xfffc})
setsockopt$SO_ATTACH_FILTER(0xffffffffffffffff, 0x1, 0x1a, &(0x7f00000001c0)={0x1, &(0x7f0000000040)=[{0x6}]}, 0x10)
r2 = syz_init_net_socket$x25(0x9, 0x5, 0x0)
r3 = socket$nl_generic(0x10, 0x3, 0x10)
r4 = syz_genetlink_get_family_id$tipc2(&(0x7f00000005c0), 0xffffffffffffffff)
sendmsg$TIPC_NL_NET_SET(r3, &(0x7f0000000480)={0x0, 0x0, &(0x7f0000000440)={&(0x7f0000000140)={0x20, r4, 0x1, 0x0, 0x0, {}, [@TIPC_NLA_NET={0xc, 0x7, 0x0, 0x1, [@TIPC_NLA_NET_ADDR={0x8, 0x2, 0xb9}]}]}, 0x20}, 0x1, 0x0, 0x0, 0x44}, 0x8004)
r5 = syz_init_net_socket$x25(0x9, 0x5, 0x0)
bind$x25(r5, &(0x7f0000000780), 0x12)
bind$x25(r2, &(0x7f0000000080), 0x12)
r6 = syz_init_net_socket$netrom(0x6, 0x5, 0x0)
ioctl$sock_inet_SIOCSIFFLAGS(r6, 0x8914, &(0x7f0000000700)={'bond0\x00'})

0s ago: executing program 0 (id=2732):
r0 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000001cc0)='memory.events\x00', 0x275a, 0x0)
r1 = syz_init_net_socket$bt_hidp(0x1f, 0x3, 0x6)
r2 = syz_init_net_socket$bt_l2cap(0x1f, 0x2, 0x0)
connect$bt_l2cap(r2, &(0x7f0000000080)={0x1f, 0x0, @fixed={'\xaa\xaa\xaa\xaa\xaa', 0x10}, 0x7ff}, 0xe)
ioctl$sock_bt_hidp_HIDPCONNADD(r1, 0x400448c8, &(0x7f0000000340)={r2, r2, 0x1, 0x1, &(0x7f00000009c0)="16", 0x31, 0x1, 0x16c0, 0x5df, 0x8b, 0x2, 0x3, 'syz0\x00'})
mmap(&(0x7f0000000000/0x3000)=nil, 0x3000, 0xb, 0x13, r0, 0xfffff000)
r3 = socket$packet(0x11, 0x3, 0x300)
setsockopt$packet_int(r3, 0x107, 0x8, &(0x7f0000000100)=0x40049, 0x4)
sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000280)={&(0x7f0000000180)=@newqdisc={0x24, 0x24, 0x1, 0x70bd2a, 0x25dfdbfe, {0x0, 0x0, 0x0, 0x0, {}, {0xffff, 0xffff}, {0x5}}}, 0x24}, 0x1, 0x0, 0x0, 0x40}, 0x0)
sendmsg$TEAM_CMD_OPTIONS_SET(0xffffffffffffffff, &(0x7f0000004bc0)={0x0, 0x0, &(0x7f0000004b80)={&(0x7f0000000100)=ANY=[@ANYBLOB="60b80000", @ANYRES16, @ANYBLOB="050427bd7000fedbdf250100000008000100", @ANYRES32, @ANYBLOB="4400028040000100240001006d6f6465000000000000000000000000000000000000000000000000000000000500030005"], 0x60}, 0x1, 0x0, 0x0, 0x4000401}, 0x4040084)
r4 = socket$inet6_sctp(0xa, 0x1, 0x84)
ioctl$sock_SIOCETHTOOL(r4, 0x8946, &(0x7f0000000040)={'netdevsim0\x00', &(0x7f0000000000)=@ethtool_pauseparam={0x13}})
ioctl$TUNSETOFFLOAD(r0, 0x400454d0, 0x21)
sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000240)={&(0x7f0000000100)=@newqdisc={0x44, 0x24, 0x1, 0x80000000, 0x0, {0x0, 0x0, 0x0, 0x0, {0x1, 0x3}, {0xa, 0xffe0}, {0x0, 0x9}}, [@qdisc_kind_options=@q_fq_pie={{0xb}, {0x14, 0x8002, [@TCA_FQ_PIE_TUPDATE={0x8, 0x4, 0x12000000}, @TCA_FQ_PIE_LIMIT={0x8, 0x1, 0x9}]}}]}, 0x44}}, 0x20004055)
sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000300)={0x0, 0x0, &(0x7f0000000080)={0x0, 0x48}, 0x1, 0x0, 0x0, 0x10}, 0x0)
r5 = socket$can_raw(0x1d, 0x3, 0x1)
sendmmsg$inet(r5, &(0x7f0000008e00)=[{{&(0x7f0000004680)={0x2, 0x0, @dev}, 0x10, &(0x7f0000004980)=[{&(0x7f00000046c0)="52bf2dd8d7127f6a18190cdba5", 0xd}], 0x1}}], 0x1, 0x0)
sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000340)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000100)=ANY=[@ANYBLOB="500000001000010425bbe5ad600027842cf52300", @ANYRES32=0x0, @ANYBLOB="0300000000000000280012800a00010076786c616e00"], 0x50}, 0x1, 0x0, 0x0, 0x13d33d22cca65c15}, 0x4008840)
r6 = socket$netlink(0x10, 0x3, 0x0)
sendmmsg(r6, &(0x7f00000002c0), 0x40000000000009f, 0x0)

kernel console output (not intermixed with test programs):

  162.262743][T10032]  ? sock_rps_record_flow+0x19/0x410
[  162.262776][T10032]  ? inet_sendmsg+0x2f4/0x370
[  162.262796][T10032]  ? bpf_lsm_socket_sendmsg+0x9/0x20
[  162.262818][T10032]  __sock_sendmsg+0x19c/0x270
[  162.262845][T10032]  ____sys_sendmsg+0x505/0x830
[  162.262872][T10032]  ? __pfx_____sys_sendmsg+0x10/0x10
[  162.262903][T10032]  ? import_iovec+0x74/0xa0
[  162.262928][T10032]  ___sys_sendmsg+0x21f/0x2a0
[  162.262952][T10032]  ? __pfx____sys_sendmsg+0x10/0x10
[  162.263014][T10032]  ? __fget_files+0x2a/0x420
[  162.263028][T10032]  ? __fget_files+0x3a0/0x420
[  162.263056][T10032]  __x64_sys_sendmsg+0x19b/0x260
[  162.263079][T10032]  ? __pfx___x64_sys_sendmsg+0x10/0x10
[  162.263111][T10032]  ? __pfx_ksys_write+0x10/0x10
[  162.263129][T10032]  ? rcu_is_watching+0x15/0xb0
[  162.263153][T10032]  ? do_syscall_64+0xbe/0x3b0
[  162.263177][T10032]  do_syscall_64+0xfa/0x3b0
[  162.263193][T10032]  ? lockdep_hardirqs_on+0x9c/0x150
[  162.263210][T10032]  ? entry_SYSCALL_64_after_hwframe+0x77/0x7f
[  162.263227][T10032]  ? clear_bhb_loop+0x60/0xb0
[  162.263248][T10032]  entry_SYSCALL_64_after_hwframe+0x77/0x7f
[  162.263264][T10032] RIP: 0033:0x7f040458eec9
[  162.263279][T10032] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48
[  162.263293][T10032] RSP: 002b:00007f0405379038 EFLAGS: 00000246 ORIG_RAX: 000000000000002e
[  162.263311][T10032] RAX: ffffffffffffffda RBX: 00007f04047e5fa0 RCX: 00007f040458eec9
[  162.263324][T10032] RDX: 49ae57ea668c7447 RSI: 0000200000000300 RDI: 0000000000000003
[  162.263335][T10032] RBP: 00007f0405379090 R08: 0000000000000000 R09: 0000000000000000
[  162.263346][T10032] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000002
[  162.263356][T10032] R13: 00007f04047e6038 R14: 00007f04047e5fa0 R15: 00007ffc96c49c08
[  162.263387][T10032]  </TASK>
[  162.284044][T10036] netlink: 8 bytes leftover after parsing attributes in process `syz.3.1169'.
[  162.382433][T10040] Can not set IPV6_FL_F_REFLECT if flowlabel_consistency sysctl is enable
[  162.730140][T10050] netlink: 'syz.3.1173': attribute type 1 has an invalid length.
[  162.851008][T10050] 8021q: adding VLAN 0 to HW filter on device bond3
[  163.148539][T10070] tipc: Started in network mode
[  163.169578][T10070] tipc: Node identity 723baade040e, cluster identity 4711
[  163.202351][T10070] tipc: Enabled bearer <eth:syzkaller0>, priority 0
[  163.209486][T10081] syzkaller0: entered promiscuous mode
[  163.220820][T10081] syzkaller0: entered allmulticast mode
[  163.313240][T10070] tipc: Resetting bearer <eth:syzkaller0>
[  163.413157][T10068] tipc: Resetting bearer <eth:syzkaller0>
[  163.461871][T10068] tipc: Disabling bearer <eth:syzkaller0>
[  163.731721][T10107] !
: renamed from dummy0 (while UP)
[  163.761184][T10106] openvswitch: netlink: Unexpected mask (mask=20040, allowed=10048)
[  163.876075][T10109] netlink: 'syz.2.1191': attribute type 26 has an invalid length.
[  163.910051][T10109] netlink: 'syz.2.1191': attribute type 26 has an invalid length.
[  164.489208][T10121] netlink: 'syz.1.1196': attribute type 10 has an invalid length.
[  164.565328][T10127] __nla_validate_parse: 8 callbacks suppressed
[  164.565345][T10127] netlink: 65039 bytes leftover after parsing attributes in process `syz.0.1198'.
[  164.646762][T10121] team0: Device ipvlan1 failed to register rx_handler
[  164.845623][T10137] RDS: rds_bind could not find a transport for ::ffff:100.1.1.2, load rds_tcp or rds_rdma?
[  165.050793][T10144] sock: sock_set_timeout: `syz.1.1201' (pid 10144) tries to set negative timeout
[  165.139735][T10144] tipc: Enabling of bearer <eth:syzkaller0> rejected, already enabled
[  165.201505][T10144] mac80211_hwsim hwsim5 syzkaller0: entered promiscuous mode
[  165.272305][T10144] tipc: Resetting bearer <eth:syzkaller0>
[  165.558392][T10146] A link change request failed with some changes committed already. Interface bond_slave_0 may have been left with an inconsistent configuration, please check.
[  165.734879][T10162] netlink: 'syz.0.1206': attribute type 12 has an invalid length.
[  165.795221][T10162] netlink: 'syz.0.1206': attribute type 29 has an invalid length.
[  165.803066][T10162] netlink: 148 bytes leftover after parsing attributes in process `syz.0.1206'.
[  165.876425][T10162] netlink: 'syz.0.1206': attribute type 2 has an invalid length.
[  165.954948][T10162] netlink: 23 bytes leftover after parsing attributes in process `syz.0.1206'.
[  166.118557][T10163] batman_adv: Cannot find parent device. Skipping batadv-on-batadv check for gretap1
[  166.231483][T10181] netlink: 8 bytes leftover after parsing attributes in process `syz.1.1210'.
[  166.244883][T10168] netlink: 156 bytes leftover after parsing attributes in process `syz.4.1208'.
[  166.268138][T10163] gretap1: default qdisc (pfifo_fast) fail, fallback to noqueue
[  166.304921][T10163] gretap1: entered promiscuous mode
[  166.305476][T10183] netlink: 'syz.2.1211': attribute type 10 has an invalid length.
[  166.319415][T10163] gretap1: entered allmulticast mode
[  166.329284][T10181] netlink: 4 bytes leftover after parsing attributes in process `syz.1.1210'.
[  166.350517][T10183] team0: Device lo is loopback device. Loopback devices can't be added as a team port
[  166.363383][T10183] A link change request failed with some changes committed already. Interface lo may have been left with an inconsistent configuration, please check.
[  166.390697][T10181] netlink: 20 bytes leftover after parsing attributes in process `syz.1.1210'.
[  166.399903][T10181] tipc: Invalid UDP bearer configuration
[  166.399958][T10181] tipc: Enabling of bearer <udp:syz1> rejected, failed to enable media
[  166.467742][T10181] netlink: 4 bytes leftover after parsing attributes in process `syz.1.1210'.
[  166.676517][T10189] netdevsim netdevsim0 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[  166.753669][T10192] netlink: 8 bytes leftover after parsing attributes in process `syz.0.1214'.
[  166.848447][T10189] netdevsim netdevsim0 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[  166.878307][T10203] netlink: 24 bytes leftover after parsing attributes in process `syz.2.1219'.
[  166.898119][T10205] netlink: 'syz.3.1220': attribute type 1 has an invalid length.
[  166.926915][T10201] openvswitch: netlink: IP tunnel attribute has 8 unknown bytes.
[  166.948966][T10212] netlink: 'syz.2.1221': attribute type 1 has an invalid length.
[  167.013080][T10189] netdevsim netdevsim0 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[  167.100864][T10206] 8021q: adding VLAN 0 to HW filter on device bond6
[  167.109589][T10206] bond5: (slave bond6): making interface the new active one
[  167.119547][T10206] bond5: (slave bond6): Enslaving as an active interface with an up link
[  167.136436][T10205] bond5: (slave ipvlan2): enslaved VLAN challenged slave. Adding VLANs will be blocked as long as it is part of bond.
[  167.149650][T10205] bond5: (slave ipvlan2): The slave device specified does not support setting the MAC address
[  167.230336][T10189] netdevsim netdevsim0 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[  167.313180][T10226] netlink: 'syz.3.1224': attribute type 1 has an invalid length.
[  167.466444][   T12] netdevsim netdevsim0 eth0: set [1, 0] type 2 family 0 port 6081 - 0
[  167.489655][   T12] netdevsim netdevsim0 eth1: set [1, 0] type 2 family 0 port 6081 - 0
[  167.501805][   T12] netdevsim netdevsim0 eth2: set [1, 0] type 2 family 0 port 6081 - 0
[  167.512722][T10230] netlink: 'syz.3.1225': attribute type 11 has an invalid length.
[  167.529394][   T12] netdevsim netdevsim0 eth3: set [1, 0] type 2 family 0 port 6081 - 0
[  168.160605][T10269] block nbd0: Unsupported socket: shutdown callout must be supported.
[  168.248719][T10269] netlink: 'syz.3.1238': attribute type 4 has an invalid length.
[  168.807127][T10304] FAULT_INJECTION: forcing a failure.
[  168.807127][T10304] name failslab, interval 1, probability 0, space 0, times 0
[  168.846352][T10304] CPU: 1 UID: 0 PID: 10304 Comm: syz.0.1252 Not tainted syzkaller #0 PREEMPT(full) 
[  168.846376][T10304] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 08/18/2025
[  168.846385][T10304] Call Trace:
[  168.846392][T10304]  <TASK>
[  168.846399][T10304]  dump_stack_lvl+0x189/0x250
[  168.846423][T10304]  ? __pfx____ratelimit+0x10/0x10
[  168.846442][T10304]  ? __pfx_dump_stack_lvl+0x10/0x10
[  168.846461][T10304]  ? __pfx__printk+0x10/0x10
[  168.846497][T10304]  should_fail_ex+0x414/0x560
[  168.846524][T10304]  should_failslab+0xa8/0x100
[  168.846548][T10304]  __kmalloc_cache_noprof+0x70/0x3d0
[  168.846569][T10304]  ? sctp_add_bind_addr+0x8c/0x370
[  168.846589][T10304]  sctp_add_bind_addr+0x8c/0x370
[  168.846609][T10304]  sctp_copy_local_addr_list+0x30b/0x4e0
[  168.846628][T10304]  ? sctp_copy_local_addr_list+0x9b/0x4e0
[  168.846644][T10304]  ? __pfx_sctp_copy_local_addr_list+0x10/0x10
[  168.846669][T10304]  ? sctp_v4_is_any+0x35/0x60
[  168.846685][T10304]  ? sctp_copy_one_addr+0x93/0x360
[  168.846705][T10304]  sctp_bind_addr_copy+0xb3/0x3c0
[  168.846722][T10304]  ? sctp_assoc_set_bind_addr_from_ep+0xa5/0x1a0
[  168.846749][T10304]  sctp_connect_new_asoc+0x2e0/0x690
[  168.846772][T10304]  ? __pfx_sctp_connect_new_asoc+0x10/0x10
[  168.846792][T10304]  ? sctp_endpoint_lookup_assoc+0x7b/0x260
[  168.846811][T10304]  ? sctp_endpoint_lookup_assoc+0x7b/0x260
[  168.846829][T10304]  ? sctp_endpoint_lookup_assoc+0x7b/0x260
[  168.846849][T10304]  ? bpf_lsm_sctp_bind_connect+0x9/0x20
[  168.846868][T10304]  ? security_sctp_bind_connect+0x7e/0x2e0
[  168.846892][T10304]  sctp_sendmsg+0x155c/0x2810
[  168.846922][T10304]  ? __pfx_sctp_sendmsg+0x10/0x10
[  168.846951][T10304]  ? aa_sk_perm+0x81e/0x950
[  168.846981][T10304]  ? __pfx_aa_sk_perm+0x10/0x10
[  168.847007][T10304]  ? sock_rps_record_flow+0x19/0x410
[  168.847033][T10304]  ? inet_sendmsg+0x2f4/0x370
[  168.847053][T10304]  ? bpf_lsm_socket_sendmsg+0x9/0x20
[  168.847074][T10304]  __sock_sendmsg+0x19c/0x270
[  168.847099][T10304]  ____sys_sendmsg+0x505/0x830
[  168.847125][T10304]  ? __pfx_____sys_sendmsg+0x10/0x10
[  168.847156][T10304]  ? import_iovec+0x74/0xa0
[  168.847181][T10304]  ___sys_sendmsg+0x21f/0x2a0
[  168.847203][T10304]  ? __pfx____sys_sendmsg+0x10/0x10
[  168.847259][T10304]  ? __fget_files+0x2a/0x420
[  168.847274][T10304]  ? __fget_files+0x3a0/0x420
[  168.847300][T10304]  __x64_sys_sendmsg+0x19b/0x260
[  168.847322][T10304]  ? __pfx___x64_sys_sendmsg+0x10/0x10
[  168.847352][T10304]  ? __pfx_ksys_write+0x10/0x10
[  168.847371][T10304]  ? rcu_is_watching+0x15/0xb0
[  168.847395][T10304]  ? do_syscall_64+0xbe/0x3b0
[  168.847418][T10304]  do_syscall_64+0xfa/0x3b0
[  168.847434][T10304]  ? lockdep_hardirqs_on+0x9c/0x150
[  168.847451][T10304]  ? entry_SYSCALL_64_after_hwframe+0x77/0x7f
[  168.847468][T10304]  ? clear_bhb_loop+0x60/0xb0
[  168.847489][T10304]  entry_SYSCALL_64_after_hwframe+0x77/0x7f
[  168.847505][T10304] RIP: 0033:0x7fa433b8eec9
[  168.847520][T10304] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48
[  168.847534][T10304] RSP: 002b:00007fa434a8f038 EFLAGS: 00000246 ORIG_RAX: 000000000000002e
[  168.847552][T10304] RAX: ffffffffffffffda RBX: 00007fa433de5fa0 RCX: 00007fa433b8eec9
[  168.847565][T10304] RDX: 49ae57ea668c7447 RSI: 0000200000000300 RDI: 0000000000000003
[  168.847576][T10304] RBP: 00007fa434a8f090 R08: 0000000000000000 R09: 0000000000000000
[  168.847587][T10304] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000002
[  168.847597][T10304] R13: 00007fa433de6038 R14: 00007fa433de5fa0 R15: 00007ffe9483dff8
[  168.847627][T10304]  </TASK>
[  168.895184][T10306] hsr0 speed is unknown, defaulting to 1000
[  169.305651][T10323] IPVS: Schedule: port zero only supported in persistent services, check your ipvs configuration
[  169.330610][T10323] bridge_slave_1: left allmulticast mode
[  169.337463][T10323] bridge_slave_1: left promiscuous mode
[  169.343469][T10323] bridge0: port 2(bridge_slave_1) entered disabled state
[  169.372397][T10323] bridge_slave_0: left allmulticast mode
[  169.402789][T10323] bridge_slave_0: left promiscuous mode
[  169.421002][T10323] bridge0: port 1(bridge_slave_0) entered disabled state
[  169.592890][T10338] __nla_validate_parse: 16 callbacks suppressed
[  169.592908][T10338] netlink: 8 bytes leftover after parsing attributes in process `syz.3.1264'.
[  169.642605][T10340] netlink: 4 bytes leftover after parsing attributes in process `syz.2.1263'.
[  169.760693][T10340] netlink: 4 bytes leftover after parsing attributes in process `syz.2.1263'.
[  169.822745][T10347] netlink: 8 bytes leftover after parsing attributes in process `syz.4.1267'.
[  169.832725][T10348] FAULT_INJECTION: forcing a failure.
[  169.832725][T10348] name failslab, interval 1, probability 0, space 0, times 0
[  169.846219][T10348] CPU: 1 UID: 0 PID: 10348 Comm: syz.3.1266 Not tainted syzkaller #0 PREEMPT(full) 
[  169.846242][T10348] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 08/18/2025
[  169.846252][T10348] Call Trace:
[  169.846259][T10348]  <TASK>
[  169.846267][T10348]  dump_stack_lvl+0x189/0x250
[  169.846292][T10348]  ? __pfx____ratelimit+0x10/0x10
[  169.846311][T10348]  ? __pfx_dump_stack_lvl+0x10/0x10
[  169.846331][T10348]  ? __pfx__printk+0x10/0x10
[  169.846368][T10348]  should_fail_ex+0x414/0x560
[  169.846397][T10348]  should_failslab+0xa8/0x100
[  169.846425][T10348]  __kmalloc_cache_noprof+0x70/0x3d0
[  169.846446][T10348]  ? sctp_add_bind_addr+0x8c/0x370
[  169.846469][T10348]  sctp_add_bind_addr+0x8c/0x370
[  169.846491][T10348]  sctp_copy_local_addr_list+0x30b/0x4e0
[  169.846512][T10348]  ? sctp_copy_local_addr_list+0x9b/0x4e0
[  169.846529][T10348]  ? __pfx_sctp_copy_local_addr_list+0x10/0x10
[  169.846551][T10348]  ? sctp_v4_is_any+0x35/0x60
[  169.846567][T10348]  ? sctp_copy_one_addr+0x93/0x360
[  169.846588][T10348]  sctp_bind_addr_copy+0xb3/0x3c0
[  169.846606][T10348]  ? sctp_assoc_set_bind_addr_from_ep+0xa5/0x1a0
[  169.846632][T10348]  sctp_connect_new_asoc+0x2e0/0x690
[  169.846655][T10348]  ? __pfx_sctp_connect_new_asoc+0x10/0x10
[  169.846677][T10348]  ? sctp_endpoint_lookup_assoc+0x7b/0x260
[  169.846697][T10348]  ? sctp_endpoint_lookup_assoc+0x7b/0x260
[  169.846714][T10348]  ? sctp_endpoint_lookup_assoc+0x7b/0x260
[  169.846734][T10348]  ? bpf_lsm_sctp_bind_connect+0x9/0x20
[  169.846761][T10348]  ? security_sctp_bind_connect+0x7e/0x2e0
[  169.846785][T10348]  sctp_sendmsg+0x155c/0x2810
[  169.846819][T10348]  ? __pfx_sctp_sendmsg+0x10/0x10
[  169.846842][T10348]  ? aa_sk_perm+0x81e/0x950
[  169.846870][T10348]  ? __pfx_aa_sk_perm+0x10/0x10
[  169.846896][T10348]  ? sock_rps_record_flow+0x19/0x410
[  169.846922][T10348]  ? inet_sendmsg+0x2f4/0x370
[  169.846941][T10348]  ? bpf_lsm_socket_sendmsg+0x9/0x20
[  169.846963][T10348]  __sock_sendmsg+0x19c/0x270
[  169.846989][T10348]  ____sys_sendmsg+0x505/0x830
[  169.847016][T10348]  ? __pfx_____sys_sendmsg+0x10/0x10
[  169.847047][T10348]  ? import_iovec+0x74/0xa0
[  169.847072][T10348]  ___sys_sendmsg+0x21f/0x2a0
[  169.847094][T10348]  ? __pfx____sys_sendmsg+0x10/0x10
[  169.847155][T10348]  ? __fget_files+0x2a/0x420
[  169.847170][T10348]  ? __fget_files+0x3a0/0x420
[  169.847197][T10348]  __x64_sys_sendmsg+0x19b/0x260
[  169.847221][T10348]  ? __pfx___x64_sys_sendmsg+0x10/0x10
[  169.847252][T10348]  ? __pfx_ksys_write+0x10/0x10
[  169.847270][T10348]  ? rcu_is_watching+0x15/0xb0
[  169.847293][T10348]  ? do_syscall_64+0xbe/0x3b0
[  169.847315][T10348]  do_syscall_64+0xfa/0x3b0
[  169.847331][T10348]  ? lockdep_hardirqs_on+0x9c/0x150
[  169.847348][T10348]  ? entry_SYSCALL_64_after_hwframe+0x77/0x7f
[  169.847364][T10348]  ? clear_bhb_loop+0x60/0xb0
[  169.847385][T10348]  entry_SYSCALL_64_after_hwframe+0x77/0x7f
[  169.847401][T10348] RIP: 0033:0x7ff873f8eec9
[  169.847416][T10348] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48
[  169.847431][T10348] RSP: 002b:00007ff874dc0038 EFLAGS: 00000246 ORIG_RAX: 000000000000002e
[  169.847449][T10348] RAX: ffffffffffffffda RBX: 00007ff8741e5fa0 RCX: 00007ff873f8eec9
[  169.847462][T10348] RDX: 49ae57ea668c7447 RSI: 0000200000000300 RDI: 0000000000000003
[  169.847474][T10348] RBP: 00007ff874dc0090 R08: 0000000000000000 R09: 0000000000000000
[  169.847484][T10348] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000002
[  169.847495][T10348] R13: 00007ff8741e6038 R14: 00007ff8741e5fa0 R15: 00007fff05110858
[  169.847527][T10348]  </TASK>
[  170.286134][T10350] netlink: 12 bytes leftover after parsing attributes in process `syz.3.1268'.
[  170.300956][T10350] netlink: 12 bytes leftover after parsing attributes in process `syz.3.1268'.
[  170.458499][T10359] netlink: 12 bytes leftover after parsing attributes in process `syz.2.1271'.
[  170.670975][T10375] netlink: 'syz.1.1273': attribute type 2 has an invalid length.
[  170.690496][T10377] netlink: 20 bytes leftover after parsing attributes in process `syz.4.1277'.
[  170.710595][T10375] RDS: rds_bind could not find a transport for ::ffff:10.1.1.2, load rds_tcp or rds_rdma?
[  170.724634][T10377] netlink: 20 bytes leftover after parsing attributes in process `syz.4.1277'.
[  170.751700][T10379] FAULT_INJECTION: forcing a failure.
[  170.751700][T10379] name failslab, interval 1, probability 0, space 0, times 0
[  170.797700][T10379] CPU: 1 UID: 0 PID: 10379 Comm: syz.2.1278 Not tainted syzkaller #0 PREEMPT(full) 
[  170.797732][T10379] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 08/18/2025
[  170.797742][T10379] Call Trace:
[  170.797750][T10379]  <TASK>
[  170.797758][T10379]  dump_stack_lvl+0x189/0x250
[  170.797782][T10379]  ? __pfx____ratelimit+0x10/0x10
[  170.797801][T10379]  ? __pfx_dump_stack_lvl+0x10/0x10
[  170.797821][T10379]  ? __pfx__printk+0x10/0x10
[  170.797858][T10379]  should_fail_ex+0x414/0x560
[  170.797887][T10379]  should_failslab+0xa8/0x100
[  170.797912][T10379]  __kmalloc_cache_noprof+0x70/0x3d0
[  170.797933][T10379]  ? sctp_add_bind_addr+0x8c/0x370
[  170.797959][T10379]  sctp_add_bind_addr+0x8c/0x370
[  170.797981][T10379]  sctp_copy_local_addr_list+0x30b/0x4e0
[  170.798002][T10379]  ? sctp_copy_local_addr_list+0x9b/0x4e0
[  170.798019][T10379]  ? __pfx_sctp_copy_local_addr_list+0x10/0x10
[  170.798041][T10379]  ? sctp_v4_is_any+0x35/0x60
[  170.798058][T10379]  ? sctp_copy_one_addr+0x93/0x360
[  170.798079][T10379]  sctp_bind_addr_copy+0xb3/0x3c0
[  170.798098][T10379]  ? sctp_assoc_set_bind_addr_from_ep+0xa5/0x1a0
[  170.798124][T10379]  sctp_connect_new_asoc+0x2e0/0x690
[  170.798150][T10379]  ? __pfx_sctp_connect_new_asoc+0x10/0x10
[  170.798171][T10379]  ? sctp_endpoint_lookup_assoc+0x7b/0x260
[  170.798190][T10379]  ? sctp_endpoint_lookup_assoc+0x7b/0x260
[  170.798207][T10379]  ? sctp_endpoint_lookup_assoc+0x7b/0x260
[  170.798226][T10379]  ? bpf_lsm_sctp_bind_connect+0x9/0x20
[  170.798245][T10379]  ? security_sctp_bind_connect+0x7e/0x2e0
[  170.798269][T10379]  sctp_sendmsg+0x155c/0x2810
[  170.798302][T10379]  ? __pfx_sctp_sendmsg+0x10/0x10
[  170.798324][T10379]  ? aa_sk_perm+0x81e/0x950
[  170.798352][T10379]  ? __pfx_aa_sk_perm+0x10/0x10
[  170.798379][T10379]  ? sock_rps_record_flow+0x19/0x410
[  170.798404][T10379]  ? inet_sendmsg+0x2f4/0x370
[  170.798420][T10379]  ? bpf_lsm_socket_sendmsg+0x9/0x20
[  170.798439][T10379]  __sock_sendmsg+0x19c/0x270
[  170.798464][T10379]  ____sys_sendmsg+0x505/0x830
[  170.798488][T10379]  ? __pfx_____sys_sendmsg+0x10/0x10
[  170.798518][T10379]  ? import_iovec+0x74/0xa0
[  170.798543][T10379]  ___sys_sendmsg+0x21f/0x2a0
[  170.798565][T10379]  ? __pfx____sys_sendmsg+0x10/0x10
[  170.798624][T10379]  ? __fget_files+0x2a/0x420
[  170.798638][T10379]  ? __fget_files+0x3a0/0x420
[  170.798671][T10379]  __x64_sys_sendmsg+0x19b/0x260
[  170.798694][T10379]  ? __pfx___x64_sys_sendmsg+0x10/0x10
[  170.798729][T10379]  ? __pfx_ksys_write+0x10/0x10
[  170.798748][T10379]  ? rcu_is_watching+0x15/0xb0
[  170.798771][T10379]  ? do_syscall_64+0xbe/0x3b0
[  170.798794][T10379]  do_syscall_64+0xfa/0x3b0
[  170.798811][T10379]  ? lockdep_hardirqs_on+0x9c/0x150
[  170.798828][T10379]  ? entry_SYSCALL_64_after_hwframe+0x77/0x7f
[  170.798843][T10379]  ? clear_bhb_loop+0x60/0xb0
[  170.798863][T10379]  entry_SYSCALL_64_after_hwframe+0x77/0x7f
[  170.798879][T10379] RIP: 0033:0x7f2f9d38eec9
[  170.798895][T10379] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48
[  170.798913][T10379] RSP: 002b:00007f2f9e148038 EFLAGS: 00000246 ORIG_RAX: 000000000000002e
[  170.798932][T10379] RAX: ffffffffffffffda RBX: 00007f2f9d5e5fa0 RCX: 00007f2f9d38eec9
[  170.798945][T10379] RDX: 49ae57ea668c7447 RSI: 0000200000000300 RDI: 0000000000000003
[  170.798956][T10379] RBP: 00007f2f9e148090 R08: 0000000000000000 R09: 0000000000000000
[  170.798967][T10379] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000002
[  170.798977][T10379] R13: 00007f2f9d5e6038 R14: 00007f2f9d5e5fa0 R15: 00007ffc0b422f28
[  170.799007][T10379]  </TASK>
[  171.181070][T10384] netlink: 'syz.3.1280': attribute type 4 has an invalid length.
[  171.190600][T10384] ieee802154 phy1 wpan1: encryption failed: -90
[  171.298357][T10390] netlink: 8 bytes leftover after parsing attributes in process `syz.3.1282'.
[  171.407906][T10397] netlink: 'syz.2.1285': attribute type 10 has an invalid length.
[  171.425344][T10400] netlink: 'syz.3.1284': attribute type 4 has an invalid length.
[  171.477601][T10398] netlink: 'syz.2.1285': attribute type 10 has an invalid length.
[  171.527879][T10397] bond0: (slave netdevsim0): Enslaving as an active interface with an up link
[  171.778139][T10411] hsr0 speed is unknown, defaulting to 1000
[  172.082880][T10422] A link change request failed with some changes committed already. Interface lo may have been left with an inconsistent configuration, please check.
[  172.368042][T10438] netlink: 'syz.2.1294': attribute type 10 has an invalid length.
[  172.410099][T10438] bond0: (slave bridge_slave_1): Enslaving as an active interface with an up link
[  172.452099][T10451] openvswitch: netlink: Flow key attr not present in new flow.
[  172.504948][ T5182] block nbd0: Receive control failed (result -32)
[  172.535139][T10449] hsr0 speed is unknown, defaulting to 1000
[  172.732903][T10458] netlink: 'syz.3.1301': attribute type 21 has an invalid length.
[  172.746723][T10458] netlink: 'syz.3.1301': attribute type 6 has an invalid length.
[  172.881208][T10469] netlink: 'syz.1.1303': attribute type 1 has an invalid length.
[  172.910720][T10469] netlink: 'syz.1.1303': attribute type 1 has an invalid length.
[  173.347294][T10479] hsr0 speed is unknown, defaulting to 1000
[  173.643066][T10492] : entered promiscuous mode
[  173.966808][T10501] veth0: entered promiscuous mode
[  173.989868][T10501] batadv_slave_1: entered promiscuous mode
[  173.999107][T10501] batman_adv: batadv0: Adding interface: macsec0
[  174.006554][T10501] batman_adv: batadv0: The MTU of interface macsec0 is too small (1468) to handle the transport of batman-adv packets. If you experience problems getting traffic through try increasing the MTU to 1500.
[  174.026992][T10501] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1
[  174.041171][T10501] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems!
[  174.051494][T10501] batman_adv: batadv0: Interface activated: macsec0
[  174.152445][T10512] openvswitch: netlink: IP tunnel attribute has 16 unknown bytes.
[  174.241915][T10500] veth0: left promiscuous mode
[  174.251917][T10518] hsr0: A HSR master's MTU cannot be greater than the smallest MTU of its slaves minus the HSR Tag length (6 octets).
[  174.646560][T10524] __nla_validate_parse: 12 callbacks suppressed
[  174.646577][T10524] netlink: 8 bytes leftover after parsing attributes in process `syz.3.1318'.
[  174.888589][T10543] netlink: 12 bytes leftover after parsing attributes in process `syz.2.1325'.
[  174.966363][T10547] vlan5: entered allmulticast mode
[  174.971509][T10547] bond0: entered allmulticast mode
[  175.021675][T10547] bond_slave_0: entered allmulticast mode
[  175.063916][T10555] netlink: 12 bytes leftover after parsing attributes in process `syz.3.1329'.
[  175.968899][T10610] veth0: entered promiscuous mode
[  176.056613][T10620] netlink: 4 bytes leftover after parsing attributes in process `syz.1.1344'.
[  176.067839][T10620] netlink: 4 bytes leftover after parsing attributes in process `syz.1.1344'.
[  176.115275][T10621] veth0: left promiscuous mode
[  176.269953][T10637] netlink: 8 bytes leftover after parsing attributes in process `syz.2.1349'.
[  176.297995][T10620] netlink: 4 bytes leftover after parsing attributes in process `syz.1.1344'.
[  176.311243][   T36] nci: nci_extract_activation_params_iso_dep: unsupported activation_rf_tech_and_mode 0x2
[  176.335957][T10638] netlink: 64 bytes leftover after parsing attributes in process `syz.0.1350'.
[  176.357046][T10638] netlink: 8 bytes leftover after parsing attributes in process `syz.0.1350'.
[  176.392132][T10638] (unnamed net_device) (uninitialized): option xmit_hash_policy: invalid value (64)
[  176.527581][T10620] netlink: 4 bytes leftover after parsing attributes in process `syz.1.1344'.
[  176.868049][T10669] validate_nla: 1 callbacks suppressed
[  176.868066][T10669] netlink: 'syz.2.1357': attribute type 33 has an invalid length.
[  177.032715][T10681] netlink: 'syz.2.1361': attribute type 10 has an invalid length.
[  177.077788][T10681] hsr0: A HSR master's MTU cannot be greater than the smallest MTU of its slaves minus the HSR Tag length (6 octets).
[  177.149952][T10686] netlink: 'syz.4.1363': attribute type 24 has an invalid length.
[  177.350775][T10700] tun0: tun_chr_ioctl cmd 1074025675
[  177.367361][T10700] tun0: persist disabled
[  177.752925][   T30] audit: type=1800 audit(1758808251.857:2): pid=10704 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed comm="syz.4.1365" name="memory.events" dev="tmpfs" ino=1341 res=0 errno=0
[  178.075305][T10734] netlink: 'syz.3.1375': attribute type 1 has an invalid length.
[  178.237229][T10747] netlink: 'syz.2.1378': attribute type 1 has an invalid length.
[  178.248100][T10747] netlink: 'syz.2.1378': attribute type 3 has an invalid length.
[  178.269759][T10753] openvswitch: netlink: Flow actions may not be safe on all matching packets.
[  178.279816][T10747] NCSI netlink: No device for ifindex 0
[  178.548162][T10760] openvswitch: netlink: Unexpected mask (mask=1040, allowed=10048)
[  178.647477][ T1212] IPVS: starting estimator thread 0...
[  178.743732][T10768] IPVS: using max 32 ests per chain, 76800 per kthread
[  178.835833][T10778] openvswitch: netlink: Missing valid actions attribute.
[  178.843307][T10778] openvswitch: netlink: Flow actions may not be safe on all matching packets.
[  179.393302][T10806] tipc: Started in network mode
[  179.413671][T10806] tipc: Node identity 8a80c5437092, cluster identity 4711
[  179.420985][T10806] tipc: Enabled bearer <eth:syzkaller0>, priority 0
[  179.467954][T10821] syzkaller0: entered promiscuous mode
[  179.530522][T10821] syzkaller0: entered allmulticast mode
[  179.560913][T10806] tipc: Resetting bearer <eth:syzkaller0>
[  179.572315][T10805] tipc: Resetting bearer <eth:syzkaller0>
[  179.603316][T10805] tipc: Disabling bearer <eth:syzkaller0>
[  179.609700][ T5182] Bluetooth: hci4: command 0x0405 tx timeout
[  179.901434][T10840] sctp: [Deprecated]: syz.0.1408 (pid 10840) Use of struct sctp_assoc_value in delayed_ack socket option.
[  179.901434][T10840] Use struct sctp_sack_info instead
[  180.314040][T10871] bridge1: entered promiscuous mode
[  180.319281][T10871] bridge1: entered allmulticast mode
[  180.514390][T10892] __nla_validate_parse: 9 callbacks suppressed
[  180.514408][T10892] netlink: 16 bytes leftover after parsing attributes in process `syz.1.1422'.
[  180.540791][T10892] netlink: 80 bytes leftover after parsing attributes in process `syz.1.1422'.
[  180.561168][T10896] netlink: 108 bytes leftover after parsing attributes in process `syz.2.1421'.
[  180.602387][   T79] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50
[  180.637688][   T79] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50
[  180.741032][T10903] syzkaller0: entered allmulticast mode
[  180.869895][T10909] netlink: 84 bytes leftover after parsing attributes in process `syz.0.1425'.
[  180.876806][T10911] team0: Device vti1 is up. Set it down before adding it as a team port
[  180.970654][T10916] netlink: 8 bytes leftover after parsing attributes in process `syz.1.1429'.
[  180.979894][   T12] af_packet: tpacket_rcv: packet too big, clamped from 24 to 4294967272. macoff=96
[  180.992595][T10916] netlink: 'syz.1.1429': attribute type 5 has an invalid length.
[  181.001001][T10916] netlink: 20 bytes leftover after parsing attributes in process `syz.1.1429'.
[  181.107690][T10916] geneve3: entered promiscuous mode
[  181.112919][T10916] geneve3: entered allmulticast mode
[  181.198657][T10913] netdevsim netdevsim1 netdevsim3 (unregistering): unset [0, 0] type 1 family 0 port 8472 - 0
[  181.224399][T10913] netdevsim netdevsim1 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[  181.235362][T10913] netdevsim netdevsim1 netdevsim3 (unregistering): unset [1, 1] type 2 family 0 port 20002 - 0
[  181.258757][   T12] netdevsim netdevsim1 netdevsim0: set [1, 2] type 2 family 0 port 256 - 0
[  181.289798][   T12] netdevsim netdevsim1 netdevsim1: set [1, 2] type 2 family 0 port 256 - 0
[  181.312703][   T12] netdevsim netdevsim1 netdevsim2: set [1, 2] type 2 family 0 port 256 - 0
[  181.399336][T10936] FAULT_INJECTION: forcing a failure.
[  181.399336][T10936] name failslab, interval 1, probability 0, space 0, times 0
[  181.424471][T10936] CPU: 1 UID: 0 PID: 10936 Comm: syz.0.1434 Not tainted syzkaller #0 PREEMPT(full) 
[  181.424495][T10936] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 08/18/2025
[  181.424506][T10936] Call Trace:
[  181.424514][T10936]  <TASK>
[  181.424521][T10936]  dump_stack_lvl+0x189/0x250
[  181.424546][T10936]  ? __pfx____ratelimit+0x10/0x10
[  181.424582][T10936]  ? __pfx_dump_stack_lvl+0x10/0x10
[  181.424602][T10936]  ? __pfx__printk+0x10/0x10
[  181.424644][T10936]  should_fail_ex+0x414/0x560
[  181.424673][T10936]  should_failslab+0xa8/0x100
[  181.424698][T10936]  __kmalloc_cache_noprof+0x70/0x3d0
[  181.424719][T10936]  ? sctp_add_bind_addr+0x8c/0x370
[  181.424742][T10936]  sctp_add_bind_addr+0x8c/0x370
[  181.424764][T10936]  sctp_copy_local_addr_list+0x30b/0x4e0
[  181.424785][T10936]  ? sctp_copy_local_addr_list+0x9b/0x4e0
[  181.424802][T10936]  ? __pfx_sctp_copy_local_addr_list+0x10/0x10
[  181.424823][T10936]  ? sctp_v4_is_any+0x35/0x60
[  181.424839][T10936]  ? sctp_copy_one_addr+0x93/0x360
[  181.424857][T10936]  sctp_bind_addr_copy+0xb3/0x3c0
[  181.424874][T10936]  ? sctp_assoc_set_bind_addr_from_ep+0xa5/0x1a0
[  181.424901][T10936]  sctp_connect_new_asoc+0x2e0/0x690
[  181.424925][T10936]  ? __pfx_sctp_connect_new_asoc+0x10/0x10
[  181.424947][T10936]  ? sctp_endpoint_lookup_assoc+0x7b/0x260
[  181.424967][T10936]  ? sctp_endpoint_lookup_assoc+0x7b/0x260
[  181.424985][T10936]  ? sctp_endpoint_lookup_assoc+0x7b/0x260
[  181.425006][T10936]  ? bpf_lsm_sctp_bind_connect+0x9/0x20
[  181.425025][T10936]  ? security_sctp_bind_connect+0x7e/0x2e0
[  181.425050][T10936]  sctp_sendmsg+0x155c/0x2810
[  181.425083][T10936]  ? __pfx_sctp_sendmsg+0x10/0x10
[  181.425107][T10936]  ? aa_sk_perm+0x81e/0x950
[  181.425137][T10936]  ? __pfx_aa_sk_perm+0x10/0x10
[  181.425163][T10936]  ? sock_rps_record_flow+0x19/0x410
[  181.425189][T10936]  ? inet_sendmsg+0x2f4/0x370
[  181.425209][T10936]  ? bpf_lsm_socket_sendmsg+0x9/0x20
[  181.425231][T10936]  __sock_sendmsg+0x19c/0x270
[  181.425259][T10936]  ____sys_sendmsg+0x505/0x830
[  181.425286][T10936]  ? __pfx_____sys_sendmsg+0x10/0x10
[  181.425318][T10936]  ? import_iovec+0x74/0xa0
[  181.425342][T10936]  ___sys_sendmsg+0x21f/0x2a0
[  181.425364][T10936]  ? __pfx____sys_sendmsg+0x10/0x10
[  181.425422][T10936]  ? __fget_files+0x2a/0x420
[  181.425437][T10936]  ? __fget_files+0x3a0/0x420
[  181.425464][T10936]  __x64_sys_sendmsg+0x19b/0x260
[  181.425488][T10936]  ? __pfx___x64_sys_sendmsg+0x10/0x10
[  181.425519][T10936]  ? __pfx_ksys_write+0x10/0x10
[  181.425547][T10936]  ? do_syscall_64+0xbe/0x3b0
[  181.425570][T10936]  do_syscall_64+0xfa/0x3b0
[  181.425587][T10936]  ? lockdep_hardirqs_on+0x9c/0x150
[  181.425605][T10936]  ? entry_SYSCALL_64_after_hwframe+0x77/0x7f
[  181.425620][T10936]  ? clear_bhb_loop+0x60/0xb0
[  181.425648][T10936]  entry_SYSCALL_64_after_hwframe+0x77/0x7f
[  181.425665][T10936] RIP: 0033:0x7fa433b8eec9
[  181.425681][T10936] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48
[  181.425696][T10936] RSP: 002b:00007fa434a8f038 EFLAGS: 00000246 ORIG_RAX: 000000000000002e
[  181.425714][T10936] RAX: ffffffffffffffda RBX: 00007fa433de5fa0 RCX: 00007fa433b8eec9
[  181.425727][T10936] RDX: 49ae57ea668c7447 RSI: 0000200000000300 RDI: 0000000000000003
[  181.425739][T10936] RBP: 00007fa434a8f090 R08: 0000000000000000 R09: 0000000000000000
[  181.425750][T10936] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000002
[  181.425760][T10936] R13: 00007fa433de6038 R14: 00007fa433de5fa0 R15: 00007ffe9483dff8
[  181.425791][T10936]  </TASK>
[  182.149871][T10965] netlink: 'syz.0.1443': attribute type 13 has an invalid length.
[  182.194246][T10967] dvmrp1: entered allmulticast mode
[  182.215447][   T12] netdevsim netdevsim0 eth0: set [0, 0] type 1 family 0 port 8472 - 0
[  182.239684][   T12] netdevsim netdevsim0 eth1: set [0, 0] type 1 family 0 port 8472 - 0
[  182.308687][T10973] IPVS: Schedule: port zero only supported in persistent services, check your ipvs configuration
[  182.350639][   T12] netdevsim netdevsim0 eth2: set [0, 0] type 1 family 0 port 8472 - 0
[  182.379482][   T12] netdevsim netdevsim0 eth3: set [0, 0] type 1 family 0 port 8472 - 0
[  182.490689][T10983] veth0_to_team: entered promiscuous mode
[  182.501827][T10983] veth0_to_team: entered allmulticast mode
[  182.769056][T10913] netdevsim netdevsim1 netdevsim2 (unregistering): unset [0, 0] type 1 family 0 port 8472 - 0
[  182.779731][T10913] netdevsim netdevsim1 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[  182.792353][T10913] netdevsim netdevsim1 netdevsim2 (unregistering): unset [1, 1] type 2 family 0 port 20002 - 0
[  182.802966][T10913] netdevsim netdevsim1 netdevsim2 (unregistering): unset [1, 2] type 2 family 0 port 256 - 0
[  182.935898][T10913] netdevsim netdevsim1 netdevsim1 (unregistering): unset [0, 0] type 1 family 0 port 8472 - 0
[  182.959050][T10913] netdevsim netdevsim1 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[  182.978060][T10913] netdevsim netdevsim1 netdevsim1 (unregistering): unset [1, 1] type 2 family 0 port 20002 - 0
[  182.988793][T10913] netdevsim netdevsim1 netdevsim1 (unregistering): unset [1, 2] type 2 family 0 port 256 - 0
[  183.010582][T11011] netlink: 'syz.4.1458': attribute type 1 has an invalid length.
[  183.018981][T11011] netlink: 4 bytes leftover after parsing attributes in process `syz.4.1458'.
[  183.028408][T11011] netlink: 4 bytes leftover after parsing attributes in process `syz.4.1458'.
[  183.091736][T10913] netdevsim netdevsim1 netdevsim0 (unregistering): unset [0, 0] type 1 family 0 port 8472 - 0
[  183.102373][T10913] netdevsim netdevsim1 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[  183.115729][T10913] netdevsim netdevsim1 netdevsim0 (unregistering): unset [1, 1] type 2 family 0 port 20002 - 0
[  183.126282][T10913] netdevsim netdevsim1 netdevsim0 (unregistering): unset [1, 2] type 2 family 0 port 256 - 0
[  183.159347][T11013] netlink: 1044 bytes leftover after parsing attributes in process `syz.4.1459'.
[  183.210217][T11013] netlink: 8 bytes leftover after parsing attributes in process `syz.4.1459'.
[  183.284331][T11021] netlink: 'syz.0.1461': attribute type 39 has an invalid length.
[  183.319730][   T36] netdevsim netdevsim1 eth0: set [0, 0] type 1 family 0 port 8472 - 0
[  183.361089][   T36] netdevsim netdevsim1 eth0: set [1, 0] type 2 family 0 port 256 - 0
[  183.380368][   T36] netdevsim netdevsim1 eth0: set [1, 1] type 2 family 0 port 6081 - 0
[  183.403900][   T36] netdevsim netdevsim1 eth0: set [1, 2] type 2 family 0 port 20002 - 0
[  183.438222][   T12] netdevsim netdevsim1 eth1: set [0, 0] type 1 family 0 port 8472 - 0
[  183.459404][   T12] netdevsim netdevsim1 eth1: set [1, 0] type 2 family 0 port 256 - 0
[  183.467782][   T12] netdevsim netdevsim1 eth1: set [1, 1] type 2 family 0 port 6081 - 0
[  183.481116][   T12] netdevsim netdevsim1 eth1: set [1, 2] type 2 family 0 port 20002 - 0
[  183.499461][ T1154] netdevsim netdevsim1 eth2: set [0, 0] type 1 family 0 port 8472 - 0
[  183.520386][ T1154] netdevsim netdevsim1 eth2: set [1, 0] type 2 family 0 port 256 - 0
[  183.530440][ T1154] netdevsim netdevsim1 eth2: set [1, 1] type 2 family 0 port 6081 - 0
[  183.541830][ T1154] netdevsim netdevsim1 eth2: set [1, 2] type 2 family 0 port 20002 - 0
[  183.678519][ T1154] netdevsim netdevsim1 eth3: set [0, 0] type 1 family 0 port 8472 - 0
[  183.713622][ T1154] netdevsim netdevsim1 eth3: set [1, 0] type 2 family 0 port 256 - 0
[  183.721730][ T1154] netdevsim netdevsim1 eth3: set [1, 1] type 2 family 0 port 6081 - 0
[  183.776947][ T1154] netdevsim netdevsim1 eth3: set [1, 2] type 2 family 0 port 20002 - 0
[  184.228777][T11068] openvswitch: netlink: Unknown key attributes 2
[  184.228837][T11071] openvswitch: netlink: Unknown key attributes 2
[  184.368204][T11076] FAULT_INJECTION: forcing a failure.
[  184.368204][T11076] name failslab, interval 1, probability 0, space 0, times 0
[  184.403979][T11076] CPU: 1 UID: 0 PID: 11076 Comm: syz.2.1477 Not tainted syzkaller #0 PREEMPT(full) 
[  184.404004][T11076] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 08/18/2025
[  184.404015][T11076] Call Trace:
[  184.404022][T11076]  <TASK>
[  184.404031][T11076]  dump_stack_lvl+0x189/0x250
[  184.404055][T11076]  ? __pfx____ratelimit+0x10/0x10
[  184.404075][T11076]  ? __pfx_dump_stack_lvl+0x10/0x10
[  184.404094][T11076]  ? __pfx__printk+0x10/0x10
[  184.404132][T11076]  should_fail_ex+0x414/0x560
[  184.404161][T11076]  should_failslab+0xa8/0x100
[  184.404185][T11076]  __kmalloc_cache_noprof+0x70/0x3d0
[  184.404206][T11076]  ? sctp_add_bind_addr+0x8c/0x370
[  184.404229][T11076]  sctp_add_bind_addr+0x8c/0x370
[  184.404251][T11076]  sctp_copy_local_addr_list+0x30b/0x4e0
[  184.404289][T11076]  ? sctp_copy_local_addr_list+0x9b/0x4e0
[  184.404306][T11076]  ? __pfx_sctp_copy_local_addr_list+0x10/0x10
[  184.404329][T11076]  ? sctp_v4_is_any+0x35/0x60
[  184.404345][T11076]  ? sctp_copy_one_addr+0x93/0x360
[  184.404367][T11076]  sctp_bind_addr_copy+0xb3/0x3c0
[  184.404385][T11076]  ? sctp_assoc_set_bind_addr_from_ep+0xa5/0x1a0
[  184.404412][T11076]  sctp_connect_new_asoc+0x2e0/0x690
[  184.404436][T11076]  ? __pfx_sctp_connect_new_asoc+0x10/0x10
[  184.404461][T11076]  ? sctp_endpoint_lookup_assoc+0x7b/0x260
[  184.404480][T11076]  ? sctp_endpoint_lookup_assoc+0x7b/0x260
[  184.404498][T11076]  ? sctp_endpoint_lookup_assoc+0x7b/0x260
[  184.404519][T11076]  ? bpf_lsm_sctp_bind_connect+0x9/0x20
[  184.404538][T11076]  ? security_sctp_bind_connect+0x7e/0x2e0
[  184.404563][T11076]  sctp_sendmsg+0x155c/0x2810
[  184.404596][T11076]  ? __pfx_sctp_sendmsg+0x10/0x10
[  184.404627][T11076]  ? aa_sk_perm+0x81e/0x950
[  184.404656][T11076]  ? __pfx_aa_sk_perm+0x10/0x10
[  184.404683][T11076]  ? sock_rps_record_flow+0x19/0x410
[  184.404709][T11076]  ? inet_sendmsg+0x2f4/0x370
[  184.404729][T11076]  ? bpf_lsm_socket_sendmsg+0x9/0x20
[  184.404751][T11076]  __sock_sendmsg+0x19c/0x270
[  184.404779][T11076]  ____sys_sendmsg+0x505/0x830
[  184.404806][T11076]  ? __pfx_____sys_sendmsg+0x10/0x10
[  184.404838][T11076]  ? import_iovec+0x74/0xa0
[  184.404862][T11076]  ___sys_sendmsg+0x21f/0x2a0
[  184.404886][T11076]  ? __pfx____sys_sendmsg+0x10/0x10
[  184.404947][T11076]  ? __fget_files+0x2a/0x420
[  184.404961][T11076]  ? __fget_files+0x3a0/0x420
[  184.404990][T11076]  __x64_sys_sendmsg+0x19b/0x260
[  184.405013][T11076]  ? __pfx___x64_sys_sendmsg+0x10/0x10
[  184.405045][T11076]  ? __pfx_ksys_write+0x10/0x10
[  184.405064][T11076]  ? rcu_is_watching+0x15/0xb0
[  184.405087][T11076]  ? do_syscall_64+0xbe/0x3b0
[  184.405111][T11076]  do_syscall_64+0xfa/0x3b0
[  184.405128][T11076]  ? lockdep_hardirqs_on+0x9c/0x150
[  184.405145][T11076]  ? entry_SYSCALL_64_after_hwframe+0x77/0x7f
[  184.405162][T11076]  ? clear_bhb_loop+0x60/0xb0
[  184.405184][T11076]  entry_SYSCALL_64_after_hwframe+0x77/0x7f
[  184.405201][T11076] RIP: 0033:0x7f2f9d38eec9
[  184.405216][T11076] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48
[  184.405231][T11076] RSP: 002b:00007f2f9e148038 EFLAGS: 00000246 ORIG_RAX: 000000000000002e
[  184.405250][T11076] RAX: ffffffffffffffda RBX: 00007f2f9d5e5fa0 RCX: 00007f2f9d38eec9
[  184.405262][T11076] RDX: 49ae57ea668c7447 RSI: 0000200000000300 RDI: 0000000000000003
[  184.405274][T11076] RBP: 00007f2f9e148090 R08: 0000000000000000 R09: 0000000000000000
[  184.405285][T11076] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000002
[  184.405296][T11076] R13: 00007f2f9d5e6038 R14: 00007f2f9d5e5fa0 R15: 00007ffc0b422f28
[  184.405328][T11076]  </TASK>
[  184.803803][T11078] tipc: Enabled bearer <eth:syzkaller0>, priority 0
[  184.815715][T11078] syzkaller0: entered promiscuous mode
[  184.821261][T11078] syzkaller0: entered allmulticast mode
[  184.886900][T11079] tipc: Resetting bearer <eth:syzkaller0>
[  185.083213][T11077] tipc: Resetting bearer <eth:syzkaller0>
[  185.136964][T11077] tipc: Disabling bearer <eth:syzkaller0>
[  185.419843][T11128] FAULT_INJECTION: forcing a failure.
[  185.419843][T11128] name failslab, interval 1, probability 0, space 0, times 0
[  185.469718][T11128] CPU: 1 UID: 0 PID: 11128 Comm: syz.0.1492 Not tainted syzkaller #0 PREEMPT(full) 
[  185.469743][T11128] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 08/18/2025
[  185.469754][T11128] Call Trace:
[  185.469761][T11128]  <TASK>
[  185.469768][T11128]  dump_stack_lvl+0x189/0x250
[  185.469792][T11128]  ? __pfx____ratelimit+0x10/0x10
[  185.469811][T11128]  ? __pfx_dump_stack_lvl+0x10/0x10
[  185.469831][T11128]  ? __pfx__printk+0x10/0x10
[  185.469865][T11128]  should_fail_ex+0x414/0x560
[  185.469895][T11128]  should_failslab+0xa8/0x100
[  185.469920][T11128]  __kmalloc_cache_noprof+0x70/0x3d0
[  185.469941][T11128]  ? sctp_add_bind_addr+0x8c/0x370
[  185.469962][T11128]  sctp_add_bind_addr+0x8c/0x370
[  185.469984][T11128]  sctp_copy_local_addr_list+0x30b/0x4e0
[  185.470005][T11128]  ? sctp_copy_local_addr_list+0x9b/0x4e0
[  185.470022][T11128]  ? __pfx_sctp_copy_local_addr_list+0x10/0x10
[  185.470043][T11128]  ? sctp_v4_is_any+0x35/0x60
[  185.470060][T11128]  ? sctp_copy_one_addr+0x93/0x360
[  185.470080][T11128]  sctp_bind_addr_copy+0xb3/0x3c0
[  185.470098][T11128]  ? sctp_assoc_set_bind_addr_from_ep+0xa5/0x1a0
[  185.470124][T11128]  sctp_connect_new_asoc+0x2e0/0x690
[  185.470148][T11128]  ? __pfx_sctp_connect_new_asoc+0x10/0x10
[  185.470169][T11128]  ? sctp_endpoint_lookup_assoc+0x7b/0x260
[  185.470189][T11128]  ? sctp_endpoint_lookup_assoc+0x7b/0x260
[  185.470207][T11128]  ? sctp_endpoint_lookup_assoc+0x7b/0x260
[  185.470228][T11128]  ? bpf_lsm_sctp_bind_connect+0x9/0x20
[  185.470247][T11128]  ? security_sctp_bind_connect+0x7e/0x2e0
[  185.470270][T11128]  sctp_sendmsg+0x155c/0x2810
[  185.470304][T11128]  ? __pfx_sctp_sendmsg+0x10/0x10
[  185.470327][T11128]  ? aa_sk_perm+0x81e/0x950
[  185.470356][T11128]  ? __pfx_aa_sk_perm+0x10/0x10
[  185.470382][T11128]  ? sock_rps_record_flow+0x19/0x410
[  185.470407][T11128]  ? inet_sendmsg+0x2f4/0x370
[  185.470427][T11128]  ? bpf_lsm_socket_sendmsg+0x9/0x20
[  185.470446][T11128]  __sock_sendmsg+0x19c/0x270
[  185.470472][T11128]  ____sys_sendmsg+0x505/0x830
[  185.470499][T11128]  ? __pfx_____sys_sendmsg+0x10/0x10
[  185.470537][T11128]  ? import_iovec+0x74/0xa0
[  185.470561][T11128]  ___sys_sendmsg+0x21f/0x2a0
[  185.470584][T11128]  ? __pfx____sys_sendmsg+0x10/0x10
[  185.470642][T11128]  ? __fget_files+0x2a/0x420
[  185.470657][T11128]  ? __fget_files+0x3a0/0x420
[  185.470685][T11128]  __x64_sys_sendmsg+0x19b/0x260
[  185.470709][T11128]  ? __pfx___x64_sys_sendmsg+0x10/0x10
[  185.470739][T11128]  ? __pfx_ksys_write+0x10/0x10
[  185.470758][T11128]  ? rcu_is_watching+0x15/0xb0
[  185.470782][T11128]  ? do_syscall_64+0xbe/0x3b0
[  185.470804][T11128]  do_syscall_64+0xfa/0x3b0
[  185.470821][T11128]  ? lockdep_hardirqs_on+0x9c/0x150
[  185.470838][T11128]  ? entry_SYSCALL_64_after_hwframe+0x77/0x7f
[  185.470855][T11128]  ? clear_bhb_loop+0x60/0xb0
[  185.470876][T11128]  entry_SYSCALL_64_after_hwframe+0x77/0x7f
[  185.470892][T11128] RIP: 0033:0x7fa433b8eec9
[  185.470908][T11128] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48
[  185.470922][T11128] RSP: 002b:00007fa434a8f038 EFLAGS: 00000246 ORIG_RAX: 000000000000002e
[  185.470941][T11128] RAX: ffffffffffffffda RBX: 00007fa433de5fa0 RCX: 00007fa433b8eec9
[  185.470953][T11128] RDX: 49ae57ea668c7447 RSI: 0000200000000300 RDI: 0000000000000003
[  185.470965][T11128] RBP: 00007fa434a8f090 R08: 0000000000000000 R09: 0000000000000000
[  185.470975][T11128] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000002
[  185.470985][T11128] R13: 00007fa433de6038 R14: 00007fa433de5fa0 R15: 00007ffe9483dff8
[  185.471017][T11128]  </TASK>
[  186.131666][T11153] netlink: 'syz.3.1501': attribute type 1 has an invalid length.
[  186.359557][T11167] FAULT_INJECTION: forcing a failure.
[  186.359557][T11167] name failslab, interval 1, probability 0, space 0, times 0
[  186.401085][T11167] CPU: 1 UID: 0 PID: 11167 Comm: syz.3.1506 Not tainted syzkaller #0 PREEMPT(full) 
[  186.401109][T11167] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 08/18/2025
[  186.401120][T11167] Call Trace:
[  186.401127][T11167]  <TASK>
[  186.401135][T11167]  dump_stack_lvl+0x189/0x250
[  186.401159][T11167]  ? __pfx____ratelimit+0x10/0x10
[  186.401177][T11167]  ? __pfx_dump_stack_lvl+0x10/0x10
[  186.401196][T11167]  ? __pfx__printk+0x10/0x10
[  186.401232][T11167]  should_fail_ex+0x414/0x560
[  186.401261][T11167]  should_failslab+0xa8/0x100
[  186.401285][T11167]  __kmalloc_cache_noprof+0x70/0x3d0
[  186.401305][T11167]  ? sctp_add_bind_addr+0x8c/0x370
[  186.401327][T11167]  sctp_add_bind_addr+0x8c/0x370
[  186.401349][T11167]  sctp_copy_local_addr_list+0x30b/0x4e0
[  186.401369][T11167]  ? sctp_copy_local_addr_list+0x9b/0x4e0
[  186.401385][T11167]  ? __pfx_sctp_copy_local_addr_list+0x10/0x10
[  186.401407][T11167]  ? sctp_v4_is_any+0x35/0x60
[  186.401430][T11167]  ? sctp_copy_one_addr+0x93/0x360
[  186.401451][T11167]  sctp_bind_addr_copy+0xb3/0x3c0
[  186.401469][T11167]  ? sctp_assoc_set_bind_addr_from_ep+0xa5/0x1a0
[  186.401495][T11167]  sctp_connect_new_asoc+0x2e0/0x690
[  186.401519][T11167]  ? __pfx_sctp_connect_new_asoc+0x10/0x10
[  186.401540][T11167]  ? sctp_endpoint_lookup_assoc+0x7b/0x260
[  186.401558][T11167]  ? sctp_endpoint_lookup_assoc+0x7b/0x260
[  186.401575][T11167]  ? sctp_endpoint_lookup_assoc+0x7b/0x260
[  186.401593][T11167]  ? bpf_lsm_sctp_bind_connect+0x9/0x20
[  186.401612][T11167]  ? security_sctp_bind_connect+0x7e/0x2e0
[  186.401634][T11167]  sctp_sendmsg+0x155c/0x2810
[  186.401667][T11167]  ? __pfx_sctp_sendmsg+0x10/0x10
[  186.401691][T11167]  ? aa_sk_perm+0x81e/0x950
[  186.401720][T11167]  ? __pfx_aa_sk_perm+0x10/0x10
[  186.401745][T11167]  ? sock_rps_record_flow+0x19/0x410
[  186.401771][T11167]  ? inet_sendmsg+0x2f4/0x370
[  186.401791][T11167]  ? bpf_lsm_socket_sendmsg+0x9/0x20
[  186.401812][T11167]  __sock_sendmsg+0x19c/0x270
[  186.401839][T11167]  ____sys_sendmsg+0x505/0x830
[  186.401865][T11167]  ? __pfx_____sys_sendmsg+0x10/0x10
[  186.401893][T11167]  ? import_iovec+0x74/0xa0
[  186.401918][T11167]  ___sys_sendmsg+0x21f/0x2a0
[  186.401940][T11167]  ? __pfx____sys_sendmsg+0x10/0x10
[  186.401994][T11167]  ? __fget_files+0x2a/0x420
[  186.401999][T11171] __nla_validate_parse: 7 callbacks suppressed
[  186.402008][T11167]  ? __fget_files+0x3a0/0x420
[  186.402013][T11171] netlink: 96 bytes leftover after parsing attributes in process `syz.4.1507'.
[  186.402034][T11167]  __x64_sys_sendmsg+0x19b/0x260
[  186.402057][T11167]  ? __pfx___x64_sys_sendmsg+0x10/0x10
[  186.402082][T11167]  ? __pfx_ksys_write+0x10/0x10
[  186.402098][T11167]  ? rcu_is_watching+0x15/0xb0
[  186.402120][T11167]  ? do_syscall_64+0xbe/0x3b0
[  186.402142][T11167]  do_syscall_64+0xfa/0x3b0
[  186.402159][T11167]  ? lockdep_hardirqs_on+0x9c/0x150
[  186.402174][T11167]  ? entry_SYSCALL_64_after_hwframe+0x77/0x7f
[  186.402191][T11167]  ? clear_bhb_loop+0x60/0xb0
[  186.402210][T11167]  entry_SYSCALL_64_after_hwframe+0x77/0x7f
[  186.402226][T11167] RIP: 0033:0x7ff873f8eec9
[  186.402242][T11167] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48
[  186.402256][T11167] RSP: 002b:00007ff874dc0038 EFLAGS: 00000246 ORIG_RAX: 000000000000002e
[  186.402274][T11167] RAX: ffffffffffffffda RBX: 00007ff8741e5fa0 RCX: 00007ff873f8eec9
[  186.402286][T11167] RDX: 49ae57ea668c7447 RSI: 0000200000000300 RDI: 0000000000000003
[  186.402298][T11167] RBP: 00007ff874dc0090 R08: 0000000000000000 R09: 0000000000000000
[  186.402308][T11167] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000002
[  186.402318][T11167] R13: 00007ff8741e6038 R14: 00007ff8741e5fa0 R15: 00007fff05110858
[  186.402348][T11167]  </TASK>
[  186.528871][T11166] netlink: 64138 bytes leftover after parsing attributes in process `syz.2.1505'.
[  186.546417][T11171] vlan6: entered allmulticast mode
[  186.783456][T11171] erspan0: entered allmulticast mode
[  187.248841][T11204] netlink: 'syz.2.1516': attribute type 1 has an invalid length.
[  187.249080][T11206] FAULT_INJECTION: forcing a failure.
[  187.249080][T11206] name failslab, interval 1, probability 0, space 0, times 0
[  187.311311][T11204] netlink: 'syz.2.1516': attribute type 1 has an invalid length.
[  187.322863][T11206] CPU: 1 UID: 0 PID: 11206 Comm: syz.1.1519 Not tainted syzkaller #0 PREEMPT(full) 
[  187.322885][T11206] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 08/18/2025
[  187.322896][T11206] Call Trace:
[  187.322903][T11206]  <TASK>
[  187.322911][T11206]  dump_stack_lvl+0x189/0x250
[  187.322934][T11206]  ? __pfx____ratelimit+0x10/0x10
[  187.322954][T11206]  ? __pfx_dump_stack_lvl+0x10/0x10
[  187.322973][T11206]  ? __pfx__printk+0x10/0x10
[  187.323006][T11206]  should_fail_ex+0x414/0x560
[  187.323034][T11206]  should_failslab+0xa8/0x100
[  187.323059][T11206]  __kmalloc_cache_noprof+0x70/0x3d0
[  187.323080][T11206]  ? sctp_add_bind_addr+0x8c/0x370
[  187.323102][T11206]  sctp_add_bind_addr+0x8c/0x370
[  187.323123][T11206]  sctp_copy_local_addr_list+0x30b/0x4e0
[  187.323143][T11206]  ? sctp_copy_local_addr_list+0x9b/0x4e0
[  187.323160][T11206]  ? __pfx_sctp_copy_local_addr_list+0x10/0x10
[  187.323181][T11206]  ? sctp_v4_is_any+0x35/0x60
[  187.323197][T11206]  ? sctp_copy_one_addr+0x93/0x360
[  187.323218][T11206]  sctp_bind_addr_copy+0xb3/0x3c0
[  187.323243][T11206]  ? sctp_assoc_set_bind_addr_from_ep+0xa5/0x1a0
[  187.323269][T11206]  sctp_connect_new_asoc+0x2e0/0x690
[  187.323292][T11206]  ? __pfx_sctp_connect_new_asoc+0x10/0x10
[  187.323314][T11206]  ? sctp_endpoint_lookup_assoc+0x7b/0x260
[  187.323334][T11206]  ? sctp_endpoint_lookup_assoc+0x7b/0x260
[  187.323352][T11206]  ? sctp_endpoint_lookup_assoc+0x7b/0x260
[  187.323372][T11206]  ? bpf_lsm_sctp_bind_connect+0x9/0x20
[  187.323391][T11206]  ? security_sctp_bind_connect+0x7e/0x2e0
[  187.323415][T11206]  sctp_sendmsg+0x155c/0x2810
[  187.323449][T11206]  ? __pfx_sctp_sendmsg+0x10/0x10
[  187.323475][T11206]  ? aa_sk_perm+0x81e/0x950
[  187.323502][T11206]  ? __pfx_aa_sk_perm+0x10/0x10
[  187.323526][T11206]  ? sock_rps_record_flow+0x19/0x410
[  187.323551][T11206]  ? inet_sendmsg+0x2f4/0x370
[  187.323570][T11206]  ? bpf_lsm_socket_sendmsg+0x9/0x20
[  187.323589][T11206]  __sock_sendmsg+0x19c/0x270
[  187.323614][T11206]  ____sys_sendmsg+0x505/0x830
[  187.323639][T11206]  ? __pfx_____sys_sendmsg+0x10/0x10
[  187.323668][T11206]  ? import_iovec+0x74/0xa0
[  187.323693][T11206]  ___sys_sendmsg+0x21f/0x2a0
[  187.323714][T11206]  ? __pfx____sys_sendmsg+0x10/0x10
[  187.323773][T11206]  ? __fget_files+0x2a/0x420
[  187.323788][T11206]  ? __fget_files+0x3a0/0x420
[  187.323816][T11206]  __x64_sys_sendmsg+0x19b/0x260
[  187.323845][T11206]  ? __pfx___x64_sys_sendmsg+0x10/0x10
[  187.323876][T11206]  ? __pfx_ksys_write+0x10/0x10
[  187.323895][T11206]  ? rcu_is_watching+0x15/0xb0
[  187.323918][T11206]  ? do_syscall_64+0xbe/0x3b0
[  187.323941][T11206]  do_syscall_64+0xfa/0x3b0
[  187.323958][T11206]  ? lockdep_hardirqs_on+0x9c/0x150
[  187.323990][T11206]  ? entry_SYSCALL_64_after_hwframe+0x77/0x7f
[  187.324006][T11206]  ? clear_bhb_loop+0x60/0xb0
[  187.324027][T11206]  entry_SYSCALL_64_after_hwframe+0x77/0x7f
[  187.324043][T11206] RIP: 0033:0x7f040458eec9
[  187.324059][T11206] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48
[  187.324073][T11206] RSP: 002b:00007f0405379038 EFLAGS: 00000246 ORIG_RAX: 000000000000002e
[  187.324092][T11206] RAX: ffffffffffffffda RBX: 00007f04047e5fa0 RCX: 00007f040458eec9
[  187.324105][T11206] RDX: 49ae57ea668c7447 RSI: 0000200000000300 RDI: 0000000000000003
[  187.324117][T11206] RBP: 00007f0405379090 R08: 0000000000000000 R09: 0000000000000000
[  187.324128][T11206] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000002
[  187.324138][T11206] R13: 00007f04047e6038 R14: 00007f04047e5fa0 R15: 00007ffc96c49c08
[  187.324170][T11206]  </TASK>
[  187.740385][T11215] netlink: 68 bytes leftover after parsing attributes in process `syz.3.1522'.
[  187.806969][T11215] netlink: 12 bytes leftover after parsing attributes in process `syz.3.1522'.
[  187.868367][T11214] netlink: 4 bytes leftover after parsing attributes in process `syz.3.1522'.
[  187.911324][T11222] netlink: 12 bytes leftover after parsing attributes in process `syz.2.1525'.
[  187.946603][T11228] netlink: 4 bytes leftover after parsing attributes in process `syz.0.1523'.
[  188.276057][T11245] netlink: 4 bytes leftover after parsing attributes in process `syz.4.1529'.
[  188.326498][T11245] batman_adv: batadv0: Interface deactivated: batadv_slave_1
[  188.457437][T11257] netlink: 8 bytes leftover after parsing attributes in process `syz.3.1533'.
[  188.502852][T11257] netlink: 'syz.3.1533': attribute type 10 has an invalid length.
[  188.532090][T11245] batman_adv: batadv0: Removing interface: batadv_slave_1
[  188.609262][T11257] veth0_vlan: entered allmulticast mode
[  188.626918][T11257] veth0_vlan: left promiscuous mode
[  188.636831][T11257] veth0_vlan: entered promiscuous mode
[  188.662120][T11257] team0: Device veth0_vlan failed to register rx_handler
[  188.844818][T11271] mac80211_hwsim hwsim5 ÿ
: renamed from wlan1 (while UP)
[  189.047740][T11288] hsr0 speed is unknown, defaulting to 1000
[  189.181671][T11296] ieee802154 phy1 wpan1: encryption failed: -126
[  189.272217][T11299] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium
[  189.516851][T11313] openvswitch: netlink: Missing key (keys=40, expected=100)
[  189.526618][T11313] netlink: 8 bytes leftover after parsing attributes in process `syz.1.1550'.
[  189.848471][   T24] hid-generic 0005:04F3:1010.0001: item fetching failed at offset 0/1
[  189.860494][   T24] hid-generic 0005:04F3:1010.0001: probe with driver hid-generic failed with error -22
[  190.485836][   T51] Bluetooth: hci4: command 0x0405 tx timeout
[  190.797434][T11390] openvswitch: netlink: IP tunnel dst address not specified
[  191.386884][T11421] xt_CONNSECMARK: only valid in 'mangle' or 'security' table, not 'syz0'
[  191.570998][T11436] __nla_validate_parse: 8 callbacks suppressed
[  191.571016][T11436] netlink: 12 bytes leftover after parsing attributes in process `syz.3.1589'.
[  191.795235][ T5182] Bluetooth: hci4: link tx timeout
[  191.800753][ T5182] Bluetooth: hci4: killing stalled connection 11:aa:aa:aa:aa:aa
[  191.811894][   T51] Bluetooth: hci4: link tx timeout
[  191.818939][   T51] Bluetooth: hci4: killing stalled connection 11:aa:aa:aa:aa:aa
[  191.827550][   T51] Bluetooth: hci4: link tx timeout
[  191.832863][   T51] Bluetooth: hci4: killing stalled connection 11:aa:aa:aa:aa:aa
[  191.841928][   T51] Bluetooth: hci4: link tx timeout
[  191.847200][   T51] Bluetooth: hci4: killing stalled connection 11:aa:aa:aa:aa:aa
[  191.855484][   T51] Bluetooth: hci4: link tx timeout
[  191.860691][   T51] Bluetooth: hci4: killing stalled connection 11:aa:aa:aa:aa:aa
[  191.870354][   T51] Bluetooth: hci4: link tx timeout
[  191.875606][   T51] Bluetooth: hci4: killing stalled connection 11:aa:aa:aa:aa:aa
[  192.321776][T11475] IPVS: Schedule: port zero only supported in persistent services, check your ipvs configuration
[  192.336071][T11475] netlink: 16 bytes leftover after parsing attributes in process `syz.0.1601'.
[  192.348583][T11475] openvswitch: netlink: Flow actions may not be safe on all matching packets.
[  192.675548][T11492] netlink: 207412 bytes leftover after parsing attributes in process `syz.0.1606'.
[  192.788987][T11494] netlink: 88 bytes leftover after parsing attributes in process `syz.1.1609'.
[  192.801149][T11494] netem: invalid attributes len -24
[  192.808161][T11494] netem: change failed
[  192.840837][T11494] netlink: 88 bytes leftover after parsing attributes in process `syz.1.1609'.
[  192.861404][T11494] netem: invalid attributes len -24
[  192.867374][T11498] netlink: 12 bytes leftover after parsing attributes in process `syz.3.1610'.
[  192.887666][T11494] netem: change failed
[  192.906342][T11498] netlink: 8 bytes leftover after parsing attributes in process `syz.3.1610'.
[  192.969310][T11498] gtp0: entered promiscuous mode
[  192.977150][T11498] gtp0: entered allmulticast mode
[  193.025462][T11511] netlink: 'syz.1.1614': attribute type 1 has an invalid length.
[  193.034951][T11511] netlink: 'syz.1.1614': attribute type 1 has an invalid length.
[  193.048551][T11514] netlink: 8 bytes leftover after parsing attributes in process `syz.4.1613'.
[  193.069899][T11514] batman_adv: Cannot find parent device. Skipping batadv-on-batadv check for gretap1
[  193.090692][T11514] gretap1: default qdisc (pfifo_fast) fail, fallback to noqueue
[  193.167381][T11514] gretap1: entered promiscuous mode
[  193.172633][T11514] gretap1: entered allmulticast mode
[  193.357546][T11533] netlink: 104 bytes leftover after parsing attributes in process `syz.2.1619'.
[  193.648444][T11551] netlink: 4 bytes leftover after parsing attributes in process `syz.0.1623'.
[  193.845783][   T51] Bluetooth: hci4: command 0x0405 tx timeout
[  193.923260][T11560] C: renamed from team_slave_0 (while UP)
[  193.940001][T11560] netlink: 'syz.4.1624': attribute type 1 has an invalid length.
[  193.948629][T11560] A link change request failed with some changes committed already. Interface C may have been left with an inconsistent configuration, please check.
[  194.098938][T11553] hsr0 speed is unknown, defaulting to 1000
[  194.140235][T11565] tipc: Enabled bearer <eth:syzkaller0>, priority 0
[  194.170504][ T1304] ieee802154 phy1 wpan1: encryption failed: -22
[  194.264670][T11577] netdevsim netdevsim3: Direct firmware load for /.€ failed with error -2
[  194.302419][T11577] netdevsim netdevsim3: Falling back to sysfs fallback for: /.€
[  194.397569][T11588] netlink: 'syz.3.1629': attribute type 7 has an invalid length.
[  194.437896][T11564] tipc: Disabling bearer <eth:syzkaller0>
[  194.816435][T11600] ipvlan2: entered promiscuous mode
[  194.875158][T11603] bond0: entered promiscuous mode
[  194.880246][T11603] bond_slave_0: entered promiscuous mode
[  194.887703][T11603] bond_slave_1: entered promiscuous mode
[  194.909079][T11603] bond0: left promiscuous mode
[  194.925264][T11603] bond_slave_0: left promiscuous mode
[  194.941656][T11603] bond_slave_1: left promiscuous mode
[  195.138981][T11617] syzkaller1: entered promiscuous mode
[  195.156584][T11617] syzkaller1: entered allmulticast mode
[  195.391103][T11638] netlink: 'syz.4.1648': attribute type 1 has an invalid length.
[  195.446819][T11638] 8021q: adding VLAN 0 to HW filter on device bond5
[  195.526204][T11645] netlink: 'syz.1.1653': attribute type 4 has an invalid length.
[  195.637566][T11653] bond0: entered promiscuous mode
[  195.642683][T11653] bond_slave_0: entered promiscuous mode
[  195.650124][T11653] bond_slave_1: entered promiscuous mode
[  195.682290][T11642] netlink: 'syz.2.1651': attribute type 24 has an invalid length.
[  195.778210][T11657] netlink: 'syz.4.1656': attribute type 21 has an invalid length.
[  195.786562][T11657] IPv6: NLM_F_CREATE should be specified when creating new route
[  196.245712][ T5182] Bluetooth: hci1: command 0x0406 tx timeout
[  196.253055][ T5182] Bluetooth: hci3: command 0x0406 tx timeout
[  196.259172][ T5182] Bluetooth: hci2: command 0x0406 tx timeout
[  196.526584][T11700] netlink: 'syz.4.1666': attribute type 4 has an invalid length.
[  196.602794][T11700] netlink: 'syz.4.1666': attribute type 4 has an invalid length.
[  196.633196][T11700] A link change request failed with some changes committed already. Interface lo may have been left with an inconsistent configuration, please check.
[  197.393338][T11713] __nla_validate_parse: 10 callbacks suppressed
[  197.393358][T11713] netlink: 16 bytes leftover after parsing attributes in process `syz.4.1670'.
[  197.930033][T11741] netlink: 8 bytes leftover after parsing attributes in process `syz.2.1680'.
[  198.447073][T11761] netlink: 40 bytes leftover after parsing attributes in process `syz.1.1687'.
[  198.498974][T11764] netlink: 48 bytes leftover after parsing attributes in process `syz.3.1688'.
[  198.905308][T11788] IPv6: RTM_NEWROUTE with no NLM_F_CREATE or NLM_F_REPLACE
[  198.912588][T11788] IPv6: NLM_F_CREATE should be set when creating new route
[  199.338726][T11813] netlink: 20 bytes leftover after parsing attributes in process `syz.2.1699'.
[  199.805499][T11848] netlink: 64 bytes leftover after parsing attributes in process `syz.0.1707'.
[  199.889771][T11854] netlink: 256 bytes leftover after parsing attributes in process `syz.3.1708'.
[  200.026871][T11860] netlink: 8 bytes leftover after parsing attributes in process `syz.1.1710'.
[  200.052874][T11860] netlink: 20 bytes leftover after parsing attributes in process `syz.1.1710'.
[  200.063422][T11861] netlink: 212368 bytes leftover after parsing attributes in process `syz.3.1709'.
[  200.073354][T11859] openvswitch: netlink: Port -8 exceeds max allowable 65535
[  200.078144][T11860] geneve4: entered promiscuous mode
[  200.083349][T11861] openvswitch: netlink: Port -8 exceeds max allowable 65535
[  200.098960][T11860] geneve4: entered allmulticast mode
[  200.195695][T11869] netlink: 'syz.1.1712': attribute type 2 has an invalid length.
[  200.347067][T11876] netlink: 'syz.0.1714': attribute type 10 has an invalid length.
[  200.395159][T11876] dummy0: entered promiscuous mode
[  200.413345][T11876] A link change request failed with some changes committed already. Interface dummy0 may have been left with an inconsistent configuration, please check.
[  200.446091][T11882] netlink: 'syz.1.1715': attribute type 4 has an invalid length.
[  200.988689][T11922] netlink: 'syz.3.1725': attribute type 1 has an invalid length.
[  201.126541][   T61] nci: nci_add_new_protocol: the target found does not have the desired protocol
[  201.333231][T11937] netlink: 'syz.4.1733': attribute type 1 has an invalid length.
[  201.444930][T11937] 8021q: adding VLAN 0 to HW filter on device bond6
[  201.510844][T11941] 8021q: adding VLAN 0 to HW filter on device bond6
[  201.518079][T11941] bond6: (slave vxcan3): The slave device specified does not support setting the MAC address
[  201.530895][T11941] bond6: (slave vxcan3): Error -95 calling set_mac_address
[  201.567619][T11944] veth3: entered promiscuous mode
[  201.576370][T11944] bond6: (slave veth3): Enslaving as an active interface with a down link
[  201.598287][T11937] vlan7: entered allmulticast mode
[  201.607077][T11937] bond6: entered allmulticast mode
[  201.720371][T11943] syzkaller0: entered promiscuous mode
[  201.728197][T11943] syzkaller0: entered allmulticast mode
[  202.318405][T11982] netlink: 'syz.3.1747': attribute type 1 has an invalid length.
[  202.336152][T11982] netlink: 'syz.3.1747': attribute type 4 has an invalid length.
[  202.443389][T11992] __nla_validate_parse: 11 callbacks suppressed
[  202.443407][T11992] netlink: 48 bytes leftover after parsing attributes in process `syz.3.1750'.
[  202.751133][T12006] netlink: 64 bytes leftover after parsing attributes in process `syz.4.1754'.
[  202.788330][T12012] openvswitch: netlink: Either Ethernet header or EtherType is required.
[  203.114571][T12033] netlink: 4 bytes leftover after parsing attributes in process `syz.2.1762'.
[  203.276536][T12029] IPVS: Error connecting to the multicast addr
[  203.295452][T12042] netlink: 24 bytes leftover after parsing attributes in process `syz.0.1764'.
[  203.384749][T12042] netlink: 'syz.0.1764': attribute type 1 has an invalid length.
[  203.421466][T12042] netlink: 'syz.0.1764': attribute type 1 has an invalid length.
[  203.520473][T12046] (unnamed net_device) (uninitialized): Removing last arp target with arp_interval on
[  203.640751][T12053] netlink: 'syz.4.1768': attribute type 1 has an invalid length.
[  203.814338][T12061] netlink: 12 bytes leftover after parsing attributes in process `syz.3.1770'.
[  203.858970][T12061] netlink: 56 bytes leftover after parsing attributes in process `syz.3.1770'.
[  203.874211][T12061] netlink: 8 bytes leftover after parsing attributes in process `syz.3.1770'.
[  204.210011][T12083] netlink: 20 bytes leftover after parsing attributes in process `syz.4.1777'.
[  204.398115][T12099] netlink: 12 bytes leftover after parsing attributes in process `syz.1.1782'.
[  204.447051][T12099] netlink: 12 bytes leftover after parsing attributes in process `syz.1.1782'.
[  204.477002][T12099] bridge0: port 1(vlan2) entered blocking state
[  204.487310][T12099] bridge0: port 1(vlan2) entered disabled state
[  204.499921][T12099] vlan2: entered allmulticast mode
[  204.530777][T12099] bridge0: entered allmulticast mode
[  204.584222][T12099] vlan2: left allmulticast mode
[  204.594612][T12099] bridge0: left allmulticast mode
[  205.691955][T12159] validate_nla: 3 callbacks suppressed
[  205.691972][T12159] netlink: 'syz.0.1801': attribute type 1 has an invalid length.
[  205.815249][T12159] 8021q: adding VLAN 0 to HW filter on device bond7
[  206.238971][T12194] netlink: 'syz.1.1811': attribute type 10 has an invalid length.
[  206.393217][T12201] batman_adv: batadv0: Interface deactivated: batadv_slave_0
[  206.413559][T12201] batman_adv: batadv0: Removing interface: batadv_slave_0
[  206.443839][T12201] batman_adv: batadv0: Interface deactivated: batadv_slave_1
[  206.459817][T12201] batman_adv: batadv0: Removing interface: batadv_slave_1
[  206.477761][T12201] batman_adv: batadv0: Interface deactivated: macsec2
[  206.511362][T12201] batman_adv: batadv0: Removing interface: macsec2
[  206.925459][T12229] netlink: 'syz.4.1822': attribute type 1 has an invalid length.
[  207.245356][T12255] openvswitch: netlink: Flow actions may not be safe on all matching packets.
[  207.352457][T12263] mac80211_hwsim hwsim5 syzkaller0: left promiscuous mode
[  207.381420][T12263] mac80211_hwsim hwsim5 syzkaller0: left allmulticast mode
[  207.496972][T12273] A link change request failed with some changes committed already. Interface geneve0 may have been left with an inconsistent configuration, please check.
[  207.752665][T12280] tipc: Enabled bearer <eth:syzkaller0>, priority 0
[  207.787961][T12280] syzkaller0: entered promiscuous mode
[  207.795479][T12285] __nla_validate_parse: 12 callbacks suppressed
[  207.795496][T12285] netlink: 8 bytes leftover after parsing attributes in process `syz.4.1840'.
[  207.825288][T12280] syzkaller0: entered allmulticast mode
[  207.870880][T12280] tipc: Resetting bearer <eth:syzkaller0>
[  207.906919][T12288] (unnamed net_device) (uninitialized): option miimon: invalid value (18446744073709551585)
[  207.926073][T12288] (unnamed net_device) (uninitialized): option miimon: allowed values 0 - 2147483647
[  207.959727][T12280] netlink: 24 bytes leftover after parsing attributes in process `syz.2.1838'.
[  207.968463][T12302] openvswitch: netlink: Flow actions may not be safe on all matching packets.
[  207.981323][T12288] veth0: entered promiscuous mode
[  208.001959][T12279] tipc: Resetting bearer <eth:syzkaller0>
[  208.015503][T12279] tipc: Disabling bearer <eth:syzkaller0>
[  208.032696][T12291] nci: __nci_request: wait_for_completion_interruptible_timeout failed -512
[  208.044378][T12305] sctp: [Deprecated]: syz.3.1844 (pid 12305) Use of int in max_burst socket option.
[  208.044378][T12305] Use struct sctp_assoc_value instead
[  208.066845][T12285] netlink: 4 bytes leftover after parsing attributes in process `syz.4.1840'.
[  208.077023][T12285] hsr_slave_0: left promiscuous mode
[  208.120236][T12287] veth0: left promiscuous mode
[  208.189874][T12307] netlink: 76 bytes leftover after parsing attributes in process `syz.2.1846'.
[  208.663646][T12335] netlink: 24 bytes leftover after parsing attributes in process `syz.1.1853'.
[  208.680353][T12335] tipc: Enabling of bearer <eth:syzkaller0> rejected, already enabled
[  208.696025][T12335] mac80211_hwsim hwsim5 syzkaller0: entered promiscuous mode
[  208.711966][T12335] mac80211_hwsim hwsim5 syzkaller0: entered allmulticast mode
[  208.742480][T12335] syzkaller0: mtu greater than device maximum
[  208.947192][T12361] netlink: 4 bytes leftover after parsing attributes in process `syz.0.1858'.
[  209.262867][T12373] A link change request failed with some changes committed already. Interface bond0 may have been left with an inconsistent configuration, please check.
[  209.382567][T12383] netlink: 152 bytes leftover after parsing attributes in process `syz.1.1868'.
[  209.443161][T12385] netlink: 'syz.0.1869': attribute type 10 has an invalid length.
[  209.477206][T12385] 8021q: adding VLAN 0 to HW filter on device team0
[  209.492288][T12389] netlink: 'syz.2.1871': attribute type 10 has an invalid length.
[  209.499034][T12385] team0: entered promiscuous mode
[  209.508348][T12385] team_slave_0: entered promiscuous mode
[  209.516107][T12385] team_slave_1: entered promiscuous mode
[  209.529444][T12385] bond0: (slave team0): Enslaving as an active interface with an up link
[  209.556814][T12389] veth1_macvtap: left promiscuous mode
[  209.702192][T12399] netlink: 28 bytes leftover after parsing attributes in process `syz.1.1873'.
[  209.715915][T12399] netlink: 56 bytes leftover after parsing attributes in process `syz.1.1873'.
[  209.784566][T12403] netdevsim netdevsim3: loading /lib/firmware/. failed with error -22
[  209.825138][T12403] netdevsim netdevsim3: Direct firmware load for . failed with error -22
[  209.854771][T12403] netdevsim netdevsim3: Falling back to sysfs fallback for: .
[  210.054368][T12417] netlink: 208 bytes leftover after parsing attributes in process `syz.3.1879'.
[  210.347303][T12435] IPVS: set_ctl: invalid protocol: 108 224.0.0.2:20003
[  210.811771][T12459] netlink: 'syz.1.1890': attribute type 1 has an invalid length.
[  210.827853][T12459] netlink: 'syz.1.1890': attribute type 3 has an invalid length.
[  210.870879][T12459] NCSI netlink: No device for ifindex 131080
[  210.910238][T12465] openvswitch: netlink: Unexpected mask (mask=440, allowed=10048)
[  212.252146][T12514] bridge0: port 3(batadv1) entered blocking state
[  212.262159][T12514] bridge0: port 3(batadv1) entered disabled state
[  212.269056][T12514] batadv1: entered allmulticast mode
[  212.276651][T12514] batadv1: entered promiscuous mode
[  212.290686][T12519] netlink: 'syz.2.1907': attribute type 10 has an invalid length.
[  212.372265][   T37] nci: nci_extract_activation_params_iso_dep: unsupported activation_rf_tech_and_mode 0x2
[  212.611384][T12532] sctp: [Deprecated]: syz.2.1912 (pid 12532) Use of struct sctp_assoc_value in delayed_ack socket option.
[  212.611384][T12532] Use struct sctp_sack_info instead
[  212.666917][T12532] block nbd2: Unsupported socket: shutdown callout must be supported.
[  212.755982][ T1154] batman_adv: batadv1: No IGMP Querier present - multicast optimizations disabled
[  212.765606][ T1154] batman_adv: batadv1: No MLD Querier present - multicast optimizations disabled
[  212.959499][T12546] __nla_validate_parse: 5 callbacks suppressed
[  212.959518][T12546] netlink: 28 bytes leftover after parsing attributes in process `syz.4.1918'.
[  212.980743][T12546] netlink: 44 bytes leftover after parsing attributes in process `syz.4.1918'.
[  213.295224][T12526] lec:lec_atm_close: lec0: Shut down!
[  213.588189][T12578] netlink: 12 bytes leftover after parsing attributes in process `syz.2.1926'.
[  213.616774][T12582] ieee802154 phy1 wpan1: encryption failed: -126
[  213.642118][T12581] netlink: 'syz.1.1927': attribute type 1 has an invalid length.
[  213.660722][T12581] openvswitch: netlink: Flow actions may not be safe on all matching packets.
[  214.104049][T12609] netlink: 4 bytes leftover after parsing attributes in process `syz.1.1933'.
[  214.435524][T12582] Bluetooth: hci0: Opcode 0x0c03 failed: -4
[  214.555243][T12632] netlink: 20 bytes leftover after parsing attributes in process `syz.3.1938'.
[  214.604914][T12636] openvswitch: netlink: Multiple metadata blocks provided
[  214.613226][T12636] openvswitch: netlink: IPv6 tunnel dst address is zero
[  214.752967][T12642] IPVS: Schedule: port zero only supported in persistent services, check your ipvs configuration
[  214.781912][T12645] netlink: 104 bytes leftover after parsing attributes in process `syz.4.1942'.
[  214.870161][T12651] netlink: 12 bytes leftover after parsing attributes in process `syz.3.1943'.
[  214.882123][T12653] netlink: 12 bytes leftover after parsing attributes in process `syz.0.1940'.
[  215.054964][T12659] netlink: 300 bytes leftover after parsing attributes in process `syz.2.1945'.
[  215.740417][T12671] openvswitch: netlink: Duplicate or invalid key (type 0).
[  215.748544][T12671] openvswitch: netlink: Flow actions may not be safe on all matching packets.
[  215.845410][ T5862] Bluetooth: hci4: command 0x0405 tx timeout
[  216.604168][T12660] vlan3: entered allmulticast mode
[  216.609323][T12660] bond0: entered allmulticast mode
[  216.615400][T12660] netdevsim netdevsim2 netdevsim0: entered allmulticast mode
[  216.624153][T12660] bridge_slave_1: entered allmulticast mode
[  216.681524][T12668] netlink: 4 bytes leftover after parsing attributes in process `syz.4.1948'.
[  216.696480][T12668] netlink: 'syz.4.1948': attribute type 3 has an invalid length.
[  216.747908][T12683] (unnamed net_device) (uninitialized): option tlb_dynamic_lb: mode dependency failed, not supported in mode balance-xor(2)
[  216.885635][T12699] netlink: 'syz.3.1955': attribute type 1 has an invalid length.
[  217.518034][   T12] nci: nci_rsp_packet: unsupported rsp opcode 0xf20
[  217.867095][T12745] netlink: 'syz.2.1967': attribute type 1 has an invalid length.
[  218.426494][T12752] netlink: 'syz.0.1968': attribute type 4 has an invalid length.
[  218.508242][T12760] __nla_validate_parse: 5 callbacks suppressed
[  218.508259][T12760] netlink: 88 bytes leftover after parsing attributes in process `syz.4.1969'.
[  218.556211][T12761] netlink: 'syz.2.1971': attribute type 10 has an invalid length.
[  218.584121][T12759] netlink: 'syz.2.1971': attribute type 10 has an invalid length.
[  218.591963][T12759] netlink: 40 bytes leftover after parsing attributes in process `syz.2.1971'.
[  218.607426][T12761] netlink: 40 bytes leftover after parsing attributes in process `syz.2.1971'.
[  218.651763][T12759] batadv0: entered promiscuous mode
[  218.668813][T12759] batadv0: entered allmulticast mode
[  218.692002][T12759] bridge0: port 1(batadv0) entered blocking state
[  218.699548][T12759] bridge0: port 1(batadv0) entered disabled state
[  218.757835][T12766] gre0: entered promiscuous mode
[  218.777112][T12776] openvswitch: netlink: Duplicate or invalid key (type 0).
[  218.790408][T12776] openvswitch: netlink: Flow actions may not be safe on all matching packets.
[  218.918595][T12781] IPVS: Schedule: port zero only supported in persistent services, check your ipvs configuration
[  219.045918][T12787] batman_adv: batadv0: Interface deactivated: batadv_slave_0
[  219.053329][T12787] batman_adv: batadv0: Removing interface: batadv_slave_0
[  219.076985][T12787] batman_adv: batadv0: Interface deactivated: batadv_slave_1
[  219.087721][T12787] batman_adv: batadv0: Removing interface: batadv_slave_1
[  219.124584][T12787] batman_adv: batadv0: Interface deactivated: macsec0
[  219.131566][T12787] batman_adv: batadv0: Removing interface: macsec0
[  219.177193][   T79] batman_adv: batadv0: No IGMP Querier present - multicast optimizations disabled
[  219.186997][   T79] batman_adv: batadv0: No MLD Querier present - multicast optimizations disabled
[  219.227319][T12799] netlink: 'syz.1.1983': attribute type 1 has an invalid length.
[  219.390122][T12799] 8021q: adding VLAN 0 to HW filter on device bond7
[  219.486116][T12801] bond7: (slave bridge3): making interface the new active one
[  219.518421][T12801] bond7: (slave bridge3): Enslaving as an active interface with an up link
[  219.557484][T12816] (unnamed net_device) (uninitialized): option active_slave: mode dependency failed, not supported in mode balance-rr(0)
[  219.611991][T12821] sctp: [Deprecated]: syz.4.1989 (pid 12821) Use of struct sctp_assoc_value in delayed_ack socket option.
[  219.611991][T12821] Use struct sctp_sack_info instead
[  219.755761][T12831] netlink: 12 bytes leftover after parsing attributes in process `syz.0.1991'.
[  219.798425][T12824] openvswitch: netlink: IP tunnel dst address not specified
[  220.406111][T12867] netlink: 788 bytes leftover after parsing attributes in process `syz.1.2005'.
[  220.452227][T12870] netlink: 8 bytes leftover after parsing attributes in process `syz.4.2003'.
[  220.466416][T12870] netlink: 64 bytes leftover after parsing attributes in process `syz.4.2003'.
[  220.567216][T12879] netlink: 16 bytes leftover after parsing attributes in process `syz.2.2007'.
[  220.850552][T12891] netlink: 8 bytes leftover after parsing attributes in process `syz.1.2012'.
[  221.113440][T12902] netlink: 28 bytes leftover after parsing attributes in process `syz.2.2015'.
[  221.393666][T12881] Bluetooth: hci0: Opcode 0x0401 failed: -4
[  221.810109][T12931] netlink: 'syz.4.2024': attribute type 1 has an invalid length.
[  222.051653][T12951] netlink: 'syz.0.2029': attribute type 42 has an invalid length.
[  222.093202][T12945] 8021q: adding VLAN 0 to HW filter on device bond7
[  222.216557][T12960] netlink: 'syz.2.2033': attribute type 21 has an invalid length.
[  222.459144][T12967] openvswitch: netlink: IP tunnel attribute has 8 unknown bytes.
[  222.508491][T12977] tipc: Enabled bearer <eth:syzkaller0>, priority 0
[  222.535268][T12977] syzkaller0: entered promiscuous mode
[  222.543601][T12977] syzkaller0: entered allmulticast mode
[  222.572137][T12980] netlink: 'syz.1.2037': attribute type 83 has an invalid length.
[  222.588683][T12965] delete_channel: no stack
[  222.626400][T12977] tipc: Resetting bearer <eth:syzkaller0>
[  222.729571][T12976] tipc: Resetting bearer <eth:syzkaller0>
[  222.763139][T12976] tipc: Disabling bearer <eth:syzkaller0>
[  223.021350][T12996] netlink: 'syz.3.2042': attribute type 1 has an invalid length.
[  223.905451][T13047] netlink: 'syz.1.2060': attribute type 27 has an invalid length.
[  223.933612][T13047] netlink: 'syz.1.2060': attribute type 4 has an invalid length.
[  223.941358][T13047] __nla_validate_parse: 15 callbacks suppressed
[  223.941373][T13047] netlink: 152 bytes leftover after parsing attributes in process `syz.1.2060'.
[  223.958140][T13048] netlink: 'syz.1.2060': attribute type 11 has an invalid length.
[  224.004433][T13048] netlink: 224 bytes leftover after parsing attributes in process `syz.1.2060'.
[  224.032899][T13052] netlink: 8 bytes leftover after parsing attributes in process `syz.2.2062'.
[  224.054911][T13053] netlink: 8 bytes leftover after parsing attributes in process `syz.2.2062'.
[  224.067703][T13052] netlink: 4 bytes leftover after parsing attributes in process `syz.2.2062'.
[  224.078825][T13053] netlink: 4 bytes leftover after parsing attributes in process `syz.2.2062'.
[  224.101992][T13052] netlink: 'syz.2.2062': attribute type 11 has an invalid length.
[  224.137784][T13053] netlink: 'syz.2.2062': attribute type 11 has an invalid length.
[  224.654934][T13081] netlink: 8 bytes leftover after parsing attributes in process `syz.3.2069'.
[  224.914635][T13093] macvtap2: entered allmulticast mode
[  224.920048][T13093] veth0_macvtap: entered allmulticast mode
[  225.086283][T13106] netlink: 12 bytes leftover after parsing attributes in process `syz.4.2077'.
[  225.107349][T13109] IPVS: Unknown mcast interface: nicvf0
[  225.134963][T13106] netlink: 12 bytes leftover after parsing attributes in process `syz.4.2077'.
[  225.198127][T13106] bridge0: port 1(vlan7) entered blocking state
[  225.214776][T13106] bridge0: port 1(vlan7) entered disabled state
[  225.232138][T13115] netlink: 16 bytes leftover after parsing attributes in process `syz.1.2079'.
[  225.251577][T13106] vlan7: entered allmulticast mode
[  225.263552][T13106] bridge0: entered allmulticast mode
[  225.288458][T13106] vlan7: left allmulticast mode
[  225.311660][T13106] bridge0: left allmulticast mode
[  225.334090][T13114] netlink: 'syz.0.2081': attribute type 12 has an invalid length.
[  225.342414][T13115] bond0: option ad_user_port_key: mode dependency failed, not supported in mode balance-rr(0)
[  225.634460][T13135] 8021q: adding VLAN 0 to HW filter on device bond8
[  225.882837][T13155] only policy match revision 0 supported
[  225.882856][T13155] unable to load match
[  227.026304][T13221] validate_nla: 4 callbacks suppressed
[  227.026321][T13221] netlink: 'syz.4.2115': attribute type 21 has an invalid length.
[  227.270875][T13242] netlink: 'syz.0.2122': attribute type 23 has an invalid length.
[  227.631106][T13257] Can not set IPV6_FL_F_REFLECT if flowlabel_consistency sysctl is enable
[  227.673008][T13262] batman_adv: Cannot find parent device. Skipping batadv-on-batadv check for gretap0
[  227.707709][T13262] gretap0: default qdisc (pfifo_fast) fail, fallback to noqueue
[  227.768273][T13262] gretap0: entered promiscuous mode
[  227.784079][T13262] gretap0: entered allmulticast mode
[  227.791427][T13267] (unnamed net_device) (uninitialized): option ad_user_port_key: mode dependency failed, not supported in mode balance-rr(0)
[  227.836345][T13268] (unnamed net_device) (uninitialized): option ad_user_port_key: mode dependency failed, not supported in mode balance-rr(0)
[  228.025839][T13283] tipc: Enabled bearer <eth:syzkaller0>, priority 0
[  228.151547][T13283] syzkaller0: entered promiscuous mode
[  228.158206][T13283] syzkaller0: entered allmulticast mode
[  228.166370][T13283] tipc: Resetting bearer <eth:syzkaller0>
[  228.219481][T13300] netlink: 'syz.2.2138': attribute type 1 has an invalid length.
[  228.237999][T13282] tipc: Resetting bearer <eth:syzkaller0>
[  229.085714][ T1212] tipc: Node number set to 3865112910
[  229.554176][T13282] tipc: Disabling bearer <eth:syzkaller0>
[  229.562931][T13300] workqueue: Failed to create a rescuer kthread for wq "bond14": -EINTR
[  229.798923][T13309] veth13: entered promiscuous mode
[  229.829688][T13311] __nla_validate_parse: 14 callbacks suppressed
[  229.829712][T13311] netlink: 128 bytes leftover after parsing attributes in process `syz.1.2142'.
[  229.857185][T13311] netlink: 128 bytes leftover after parsing attributes in process `syz.1.2142'.
[  230.045418][T13335] Unsupported ieee802154 address type: 0
[  230.065393][T13334] lo: entered allmulticast mode
[  230.078468][T13334] tunl0: entered allmulticast mode
[  230.124359][T13334] gre0: entered allmulticast mode
[  230.289239][T13334] erspan0: entered allmulticast mode
[  230.317906][T13334] ip_vti0: entered allmulticast mode
[  230.336588][T13334] ip6_vti0: entered allmulticast mode
[  230.368178][T13334] sit0: entered allmulticast mode
[  230.403403][T13334] ip6tnl0: entered allmulticast mode
[  230.428584][T13334] ip6gre0: entered allmulticast mode
[  230.468974][T13334] syz_tun: entered allmulticast mode
[  230.537976][T13334] ip6gretap0: entered allmulticast mode
[  230.583037][T13334] bridge0: entered allmulticast mode
[  230.590702][T13334] vcan0: entered allmulticast mode
[  230.599564][T13334] bond0: entered allmulticast mode
[  230.606565][T13334] bond_slave_0: entered allmulticast mode
[  230.612378][T13334] bond_slave_1: entered allmulticast mode
[  230.618517][T13334] mac80211_hwsim hwsim9 wlan1: entered allmulticast mode
[  230.641920][T13334] team0: entered allmulticast mode
[  230.647661][T13334] team_slave_0: entered allmulticast mode
[  230.654015][T13334] team_slave_1: entered allmulticast mode
[  230.666064][T13334] dummy0: entered allmulticast mode
[  230.683289][T13334] nlmon0: entered allmulticast mode
[  230.697782][T13334] caif0: entered allmulticast mode
[  230.704392][T13334] veth0: entered allmulticast mode
[  230.714731][T13334] veth1: entered allmulticast mode
[  230.735219][T13334] wg0: entered allmulticast mode
[  230.745048][T13334] wg1: entered allmulticast mode
[  230.756916][T13334] wg2: entered allmulticast mode
[  230.765585][T13334] veth0_to_bridge: entered allmulticast mode
[  230.802237][T13334] veth1_to_bridge: entered allmulticast mode
[  230.818784][T13334] veth0_to_bond: entered allmulticast mode
[  230.829704][T13334] veth1_to_bond: entered allmulticast mode
[  230.848621][T13334] veth0_to_team: entered allmulticast mode
[  230.870866][T13334] veth1_to_team: entered allmulticast mode
[  230.890764][T13334] veth0_to_batadv: entered allmulticast mode
[  230.908811][T13334] batadv_slave_0: entered allmulticast mode
[  230.924910][T13334] veth1_to_batadv: entered allmulticast mode
[  230.938240][T13334] batadv_slave_1: entered allmulticast mode
[  230.952956][T13334] xfrm0: entered allmulticast mode
[  230.965334][T13334] veth0_to_hsr: entered allmulticast mode
[  230.977511][T13334] hsr_slave_0: entered allmulticast mode
[  230.989696][T13334] veth1_to_hsr: entered allmulticast mode
[  231.005605][T13334] hsr_slave_1: entered allmulticast mode
[  231.017859][T13334] hsr0: entered allmulticast mode
[  231.040166][T13334] veth1_virt_wifi: entered allmulticast mode
[  231.054781][T13334] veth0_virt_wifi: entered allmulticast mode
[  231.069432][T13334] net veth1_virt_wifi virt_wifi0: entered allmulticast mode
[  231.077426][T13334] veth1_vlan: entered allmulticast mode
[  231.088613][T13334] vlan0: entered allmulticast mode
[  231.097440][T13334] vlan1: entered allmulticast mode
[  231.103189][T13334] macvlan0: entered allmulticast mode
[  231.116892][T13334] macvlan1: entered allmulticast mode
[  231.128145][T13334] ipvlan0: entered allmulticast mode
[  231.133808][T13334] ipvlan1: entered allmulticast mode
[  231.140652][T13334] veth1_macvtap: entered allmulticast mode
[  231.149871][T13334] veth0_macvtap: entered allmulticast mode
[  231.165546][T13334] geneve0: entered allmulticast mode
[  231.178812][T13334] geneve1: entered allmulticast mode
[  231.187996][T13334] netdevsim netdevsim3 netdevsim0: left promiscuous mode
[  231.195506][T13334] netdevsim netdevsim3 netdevsim0: entered allmulticast mode
[  231.205198][T13334] netdevsim netdevsim3 netdevsim1: entered allmulticast mode
[  231.218407][T13334] netdevsim netdevsim3 netdevsim2: entered allmulticast mode
[  231.230256][T13334] netdevsim netdevsim3 netdevsim3: entered allmulticast mode
[  231.260285][T13334] mac80211_hwsim hwsim8 wlan0: entered allmulticast mode
[  231.295340][T13334] : entered allmulticast mode
[  231.303852][T13334] : entered allmulticast mode
[  231.315945][T13334] bridge1: entered allmulticast mode
[  231.326637][T13334] @: entered allmulticast mode
[  231.337837][T13334] bridge2: entered allmulticast mode
[  231.343424][T13334] ip6tnl1: entered allmulticast mode
[  231.356260][T13334] vlan2: entered allmulticast mode
[  231.361651][T13334] bridge3: entered allmulticast mode
[  231.373911][T13334] gretap1: entered allmulticast mode
[  231.388400][T13334] bond1: entered allmulticast mode
[  231.405246][T13334] bond2: entered allmulticast mode
[  231.410528][T13334] gretap2: entered allmulticast mode
[  231.420882][T13334] veth2: entered allmulticast mode
[  231.428373][T13334] ip6erspan0: entered allmulticast mode
[  231.437388][T13334] bridge4: entered allmulticast mode
[  231.451516][T13334] bridge5: entered allmulticast mode
[  231.477319][T13334] bond3: entered allmulticast mode
[  231.486747][T13334] bond4: entered allmulticast mode
[  231.491960][T13334] bond5: entered allmulticast mode
[  231.497259][T13334] bond6: entered allmulticast mode
[  231.506004][T13334] bridge6: entered allmulticast mode
[  231.514181][T13334] macsec0: entered allmulticast mode
[  231.530134][T13334] bond7: entered allmulticast mode
[  231.535656][T13334] bridge7: entered allmulticast mode
[  231.541490][T13334] gtp0: left promiscuous mode
[  231.551699][T13334] ipip0: entered allmulticast mode
[  231.561820][T13334] macsec1: entered allmulticast mode
[  231.568175][T13334] gretap0: left promiscuous mode
[  231.647984][T13360] tipc: Enabled bearer <eth:syzkaller0>, priority 0
[  231.682924][T13368] netlink: 'syz.4.2154': attribute type 6 has an invalid length.
[  231.724260][T13368] netlink: 'syz.4.2154': attribute type 1 has an invalid length.
[  231.749548][T13368] netlink: 181400 bytes leftover after parsing attributes in process `syz.4.2154'.
[  231.844974][T13362] syzkaller0: entered promiscuous mode
[  231.850536][T13362] syzkaller0: entered allmulticast mode
[  231.857631][T13362] tipc: Resetting bearer <eth:syzkaller0>
[  231.898308][T13392] netlink: 20 bytes leftover after parsing attributes in process `syz.1.2159'.
[  231.904499][   T79] tipc: Resetting bearer <eth:syzkaller0>
[  231.915401][ T7835] netdevsim netdevsim3 netdevsim0: unset [0, 0] type 1 family 0 port 8472 - 0
[  231.927045][ T7835] netdevsim netdevsim3 netdevsim0: unset [1, 0] type 2 family 0 port 6081 - 0
[  231.936303][ T7835] netdevsim netdevsim3 netdevsim1: unset [0, 0] type 1 family 0 port 8472 - 0
[  231.945399][ T7835] netdevsim netdevsim3 netdevsim1: unset [1, 0] type 2 family 0 port 6081 - 0
[  231.957374][T13353] tipc: Resetting bearer <eth:syzkaller0>
[  232.665247][   T24] tipc: Node number set to 3805962353
[  233.145231][T13353] tipc: Disabling bearer <eth:syzkaller0>
[  233.173905][T13390] netlink: 'syz.1.2159': attribute type 1 has an invalid length.
[  233.175540][ T7835] netdevsim netdevsim3 netdevsim2: unset [0, 0] type 1 family 0 port 8472 - 0
[  233.181658][T13390] netlink: 224 bytes leftover after parsing attributes in process `syz.1.2159'.
[  233.229267][ T7835] netdevsim netdevsim3 netdevsim2: unset [1, 0] type 2 family 0 port 6081 - 0
[  233.263830][T13395] netlink: 8 bytes leftover after parsing attributes in process `syz.2.2160'.
[  233.270529][ T7835] netdevsim netdevsim3 netdevsim3: unset [0, 0] type 1 family 0 port 8472 - 0
[  233.307098][ T7835] netdevsim netdevsim3 netdevsim3: unset [1, 0] type 2 family 0 port 6081 - 0
[  233.329715][T13395] netlink: 8 bytes leftover after parsing attributes in process `syz.2.2160'.
[  233.367938][T13398] netlink: 'syz.0.2163': attribute type 1 has an invalid length.
[  233.378084][T13395] netlink: 4 bytes leftover after parsing attributes in process `syz.2.2160'.
[  233.434591][T13405] netlink: 4 bytes leftover after parsing attributes in process `syz.1.2164'.
[  233.509497][T13398] 8021q: adding VLAN 0 to HW filter on device bond9
[  233.544292][T13403] bond9: (slave geneve2): making interface the new active one
[  233.554567][T13403] bond9: (slave geneve2): Enslaving as an active interface with an up link
[  234.261956][T13454] netlink: 'syz.2.2177': attribute type 11 has an invalid length.
[  234.627189][T13474] netlink: 8 bytes leftover after parsing attributes in process `syz.3.2182'.
[  234.777310][T13482] tipc: Enabling of bearer <eth:syzkaller0> rejected, already enabled
[  234.893946][T13486] syzkaller0: entered promiscuous mode
[  234.919702][T13486] syzkaller0: entered allmulticast mode
[  234.965780][T13486] sch_tbf: burst 127 is lower than device syzkaller0 mtu (1514) !
[  235.328313][T13504] tipc: Enabling of bearer <eth:syzkaller0> rejected, already enabled
[  235.639186][T13528] netlink: 20 bytes leftover after parsing attributes in process `syz.4.2196'.
[  235.679326][T13528] netlink: 8 bytes leftover after parsing attributes in process `syz.4.2196'.
[  235.699386][T13533] netlink: 12 bytes leftover after parsing attributes in process `syz.2.2199'.
[  235.720907][T13533] xfrm1: entered promiscuous mode
[  235.726168][T13533] xfrm1: entered allmulticast mode
[  235.734906][T13533] netlink: 12 bytes leftover after parsing attributes in process `syz.2.2199'.
[  235.861250][T13539] netlink: 'syz.4.2201': attribute type 1 has an invalid length.
[  235.885607][T13539] netlink: 'syz.4.2201': attribute type 2 has an invalid length.
[  235.918569][T13539] netlink: 'syz.4.2201': attribute type 3 has an invalid length.
[  235.959156][T13539] netlink: 8 bytes leftover after parsing attributes in process `syz.4.2201'.
[  236.109203][T13547] xt_CONNSECMARK: only valid in 'mangle' or 'security' table, not 'syz0'
[  236.338907][T13564] syzkaller0: entered promiscuous mode
[  236.345280][T13564] syzkaller0: entered allmulticast mode
[  236.495956][T13582] netlink: 'syz.3.2216': attribute type 4 has an invalid length.
[  236.706828][T13589] netlink: 64 bytes leftover after parsing attributes in process `syz.4.2219'.
[  236.925577][T13600] tipc: Enabled bearer <eth:syzkaller0>, priority 0
[  236.957875][T13603] netlink: 184 bytes leftover after parsing attributes in process `syz.4.2224'.
[  236.967776][T13600] syzkaller0: entered promiscuous mode
[  236.973265][T13600] syzkaller0: entered allmulticast mode
[  236.998061][T13602] netlink: 'syz.4.2224': attribute type 1 has an invalid length.
[  237.006056][T13607] netlink: 4 bytes leftover after parsing attributes in process `syz.4.2224'.
[  237.065922][T13602] 8021q: adding VLAN 0 to HW filter on device bond9
[  237.104578][T13610] netlink: 20 bytes leftover after parsing attributes in process `syz.0.2225'.
[  237.130453][T13600] tipc: Resetting bearer <eth:syzkaller0>
[  237.145464][T13598] tipc: Resetting bearer <eth:syzkaller0>
[  237.224898][T13598] tipc: Disabling bearer <eth:syzkaller0>
[  237.546657][T13638] netlink: 'syz.0.2235': attribute type 21 has an invalid length.
[  237.565564][T13638] netlink: 128 bytes leftover after parsing attributes in process `syz.0.2235'.
[  237.574832][T13642] vlan3: entered allmulticast mode
[  237.595072][T13638] netlink: 'syz.0.2235': attribute type 4 has an invalid length.
[  237.603031][T13638] netlink: 'syz.0.2235': attribute type 5 has an invalid length.
[  238.969082][T13732] Bluetooth: MGMT ver 1.23
[  239.044854][T13738] validate_nla: 5 callbacks suppressed
[  239.044871][T13738] netlink: 'syz.1.2262': attribute type 12 has an invalid length.
[  239.152187][T13738] geneve5: entered promiscuous mode
[  239.243412][T13748] sctp: [Deprecated]: syz.2.2265 (pid 13748) Use of int in maxseg socket option.
[  239.243412][T13748] Use struct sctp_assoc_value instead
[  239.301470][T13751] netlink: 'syz.0.2266': attribute type 9 has an invalid length.
[  239.352427][T13751] netlink: 'syz.0.2266': attribute type 4 has an invalid length.
[  239.718168][T13774] netlink: 'syz.2.2274': attribute type 1 has an invalid length.
[  239.822800][T13774] 8021q: adding VLAN 0 to HW filter on device bond14
[  239.924212][T13791] netlink: 'syz.0.2271': attribute type 21 has an invalid length.
[  239.998243][T13796] netlink: 'syz.0.2271': attribute type 21 has an invalid length.
[  240.039980][T13799] nftables ruleset with unbound chain
[  240.185402][T13781] bond14 (unregistering): Released all slaves
[  240.202694][T13791] netlink: 'syz.0.2271': attribute type 4 has an invalid length.
[  240.211042][T13791] netlink: 'syz.0.2271': attribute type 5 has an invalid length.
[  240.219039][T13796] netlink: 'syz.0.2271': attribute type 4 has an invalid length.
[  240.239977][T13796] netlink: 'syz.0.2271': attribute type 5 has an invalid length.
[  240.432528][T13814] bond14: entered promiscuous mode
[  240.439494][T13814] 8021q: adding VLAN 0 to HW filter on device bond14
[  240.450325][T13820] tipc: Enabled bearer <eth:syzkaller0>, priority 0
[  240.557163][T13821] 8021q: adding VLAN 0 to HW filter on device bond15
[  240.566873][T13821] bond14: (slave bond15): making interface the new active one
[  240.574729][T13821] bond15: entered promiscuous mode
[  240.583402][T13821] bond14: (slave bond15): Enslaving as an active interface with an up link
[  240.592551][T13811] syzkaller0: entered promiscuous mode
[  240.675767][T13811] syzkaller0: entered allmulticast mode
[  240.733085][T13827] sch_tbf: burst 127 is lower than device syzkaller0 mtu (1514) !
[  240.913835][T13811] tipc: Resetting bearer <eth:syzkaller0>
[  240.927548][T13810] tipc: Resetting bearer <eth:syzkaller0>
[  240.959725][T13810] tipc: Disabling bearer <eth:syzkaller0>
[  241.245569][T13849] 8021q: adding VLAN 0 to HW filter on device bond0
[  241.288328][T13849] 8021q: adding VLAN 0 to HW filter on device team0
[  241.320660][T13849] A link change request failed with some changes committed already. Interface caif0 may have been left with an inconsistent configuration, please check.
[  241.412548][T13875] tipc: Enabling of bearer <eth:syzkaller0> rejected, failed to enable media
[  241.677387][T13859] infiniband syz1: set down
[  241.682221][T13859] infiniband syz1: added bond0
[  241.803403][T13859] RDS/IB: syz1: added
[  241.838354][T13859] smc: adding ib device syz1 with port count 1
[  241.848835][T13859] smc:    ib device syz1 port 1 has pnetid 
[  241.974271][T13899] __nla_validate_parse: 16 callbacks suppressed
[  241.974288][T13899] netlink: 28 bytes leftover after parsing attributes in process `syz.3.2304'.
[  242.286245][T13916] tipc: Enabled bearer <eth:syzkaller0>, priority 0
[  242.312806][T13919] tipc: Enabling of bearer <eth:syzkaller0> rejected, already enabled
[  242.439656][T13915] syzkaller0: entered promiscuous mode
[  242.445484][T13915] syzkaller0: entered allmulticast mode
[  242.452038][T13915] tipc: Resetting bearer <eth:syzkaller0>
[  242.541811][   T12] nci: nci_rsp_packet: unknown rsp opcode 0x221
[  242.624500][   T36] tipc: Resetting bearer <eth:syzkaller0>
[  242.631722][T13915] tipc: Resetting bearer <eth:syzkaller0>
[  243.347703][ T5926] tipc: Node number set to 4195534147
[  243.978478][T13915] tipc: Disabling bearer <eth:syzkaller0>
[  244.000098][T13942] bridge: RTM_NEWNEIGH bridge0 without NUD_PERMANENT
[  244.119960][T13947] netlink: 8 bytes leftover after parsing attributes in process `syz.2.2314'.
[  244.183546][T13947] netlink: 4 bytes leftover after parsing attributes in process `syz.2.2314'.
[  244.211081][T13947] validate_nla: 3 callbacks suppressed
[  244.211096][T13947] netlink: 'syz.2.2314': attribute type 11 has an invalid length.
[  244.260340][T13954] lo: entered promiscuous mode
[  244.289401][T13954] tunl0: entered promiscuous mode
[  244.304536][T13954] gre0: entered promiscuous mode
[  244.320750][T13954] gretap0: entered promiscuous mode
[  244.328700][T13954] erspan0: entered promiscuous mode
[  244.351607][T13954] ip_vti0: entered promiscuous mode
[  244.656862][T13958] vlan0 (unregistering): left allmulticast mode
[  244.663730][T13958] veth0_vlan (unregistering): left allmulticast mode
[  244.670493][T13958] vlan0 (unregistering): left promiscuous mode
[  244.848474][T13974] netdevsim netdevsim2: Direct firmware load for ..€ failed with error -2
[  244.893339][T13974] netdevsim netdevsim2: Falling back to sysfs fallback for: ..€
[  244.961454][T13979] IPVS: length: 89 != 8
[  245.336852][T13990] netlink: 20 bytes leftover after parsing attributes in process `syz.3.2328'.
[  245.780424][T14007] netlink: 'syz.1.2334': attribute type 11 has an invalid length.
[  245.859001][T14015] netlink: 'syz.2.2338': attribute type 1 has an invalid length.
[  245.871237][T14007] netlink: 12 bytes leftover after parsing attributes in process `syz.1.2334'.
[  245.920102][T14015] 8021q: adding VLAN 0 to HW filter on device bond16
[  246.162199][T14028] netlink: 'syz.2.2342': attribute type 1 has an invalid length.
[  246.187777][T14028] netlink: 172 bytes leftover after parsing attributes in process `syz.2.2342'.
[  246.222480][T14028] netlink: 'syz.2.2342': attribute type 1 has an invalid length.
[  246.237365][T14028] netlink: 12 bytes leftover after parsing attributes in process `syz.2.2342'.
[  246.405329][T14043] delete_channel: no stack
[  246.407255][T14041] netlink: 252 bytes leftover after parsing attributes in process `syz.4.2345'.
[  246.585599][T14047] nbd3: detected capacity change from 0 to 63
[  246.599842][T14051] block nbd3: NBD_DISCONNECT
[  246.610557][T14051] block nbd3: Disconnected due to user request.
[  246.634881][T14051] block nbd3: shutting down sockets
[  246.663621][    C0] I/O error, dev nbd3, sector 0 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 2
[  246.672955][    C0] Buffer I/O error on dev nbd3, logical block 0, async page read
[  246.696759][   T97] I/O error, dev nbd3, sector 2 op 0x0:(READ) flags 0x0 phys_seg 3 prio class 2
[  246.707435][   T97] Buffer I/O error on dev nbd3, logical block 1, async page read
[  246.715740][   T97] Buffer I/O error on dev nbd3, logical block 2, async page read
[  246.723867][   T97] Buffer I/O error on dev nbd3, logical block 3, async page read
[  246.733218][ T5874] I/O error, dev nbd3, sector 0 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 2
[  246.760589][ T5874] Buffer I/O error on dev nbd3, logical block 0, async page read
[  246.780163][ T5874] I/O error, dev nbd3, sector 2 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 2
[  246.831092][ T5874] Buffer I/O error on dev nbd3, logical block 1, async page read
[  246.839402][ T5874] I/O error, dev nbd3, sector 4 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 2
[  246.848956][ T5874] Buffer I/O error on dev nbd3, logical block 2, async page read
[  246.858705][ T5874] I/O error, dev nbd3, sector 6 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 2
[  246.888406][ T5874] Buffer I/O error on dev nbd3, logical block 3, async page read
[  246.920495][ T5874] I/O error, dev nbd3, sector 0 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 2
[  246.946618][T14064] netlink: 20 bytes leftover after parsing attributes in process `syz.4.2351'.
[  246.973552][ T5874] Buffer I/O error on dev nbd3, logical block 0, async page read
[  246.982780][T14070] netlink: 8 bytes leftover after parsing attributes in process `syz.3.2354'.
[  246.996838][ T5874] I/O error, dev nbd3, sector 2 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 2
[  247.018647][T14070] openvswitch: netlink: nsh attribute has 2338 unknown bytes.
[  247.035198][ T5874] Buffer I/O error on dev nbd3, logical block 1, async page read
[  247.049923][T14070] openvswitch: netlink: Flow actions may not be safe on all matching packets.
[  247.059587][ T5874] I/O error, dev nbd3, sector 4 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 2
[  247.071263][ T5874] I/O error, dev nbd3, sector 6 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 2
[  247.080784][T14073] netlink: 'syz.2.2355': attribute type 1 has an invalid length.
[  247.117591][ T5874] ldm_validate_partition_table(): Disk read failed.
[  247.139668][ T5874] Dev nbd3: unable to read RDB block 0
[  247.162350][T14073] workqueue: Failed to create a rescuer kthread for wq "bond17": -EINTR
[  247.166681][ T5874]  nbd3: unable to read partition table
[  247.176695][T14083] netlink: 32 bytes leftover after parsing attributes in process `syz.4.2357'.
[  247.198920][T14083] nbd: must specify a size in bytes for the device
[  247.221352][ T5874] ldm_validate_partition_table(): Disk read failed.
[  247.231933][ T5874] Dev nbd3: unable to read RDB block 0
[  247.241598][ T5874]  nbd3: unable to read partition table
[  247.433908][T14098] netlink: 'syz.3.2361': attribute type 4 has an invalid length.
[  247.551547][T14106] netlink: 8 bytes leftover after parsing attributes in process `syz.0.2364'.
[  247.553234][T14108] netlink: 12 bytes leftover after parsing attributes in process `syz.3.2365'.
[  247.564512][T14106] bridge_slave_0: entered promiscuous mode
[  247.748455][T14117] netlink: 12 bytes leftover after parsing attributes in process `syz.4.2367'.
[  247.910832][T14127] netlink: 24 bytes leftover after parsing attributes in process `syz.1.2370'.
[  248.002735][T14127] netlink: 'syz.1.2370': attribute type 10 has an invalid length.
[  248.006000][T14130] netlink: 12 bytes leftover after parsing attributes in process `syz.3.2372'.
[  248.060416][T14135] openvswitch: netlink: Flow actions may not be safe on all matching packets.
[  248.074576][T14137] syz.4.2374: vmalloc error: size 8589938688, exceeds total pages, mode:0xdc0(GFP_KERNEL|__GFP_ZERO), nodemask=(null),cpuset=/,mems_allowed=0-1
[  248.078262][T14127] bond0: (slave ÿ
): Enslaving as an active interface with an up link
[  248.090500][T14137] CPU: 0 UID: 0 PID: 14137 Comm: syz.4.2374 Not tainted syzkaller #0 PREEMPT(full) 
[  248.090523][T14137] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 08/18/2025
[  248.090544][T14137] Call Trace:
[  248.090551][T14137]  <TASK>
[  248.090559][T14137]  dump_stack_lvl+0x189/0x250
[  248.090588][T14137]  ? __pfx_dump_stack_lvl+0x10/0x10
[  248.090608][T14137]  ? __pfx__printk+0x10/0x10
[  248.090629][T14137]  ? cpuset_print_current_mems_allowed+0x1f/0x360
[  248.090650][T14137]  ? cpuset_print_current_mems_allowed+0x1f/0x360
[  248.090670][T14137]  ? cpuset_print_current_mems_allowed+0x2ee/0x360
[  248.090691][T14137]  warn_alloc+0x214/0x310
[  248.090716][T14137]  ? stack_depot_save_flags+0x40/0x860
[  248.090741][T14137]  ? __pfx_warn_alloc+0x10/0x10
[  248.090765][T14137]  ? kasan_save_track+0x4f/0x80
[  248.090785][T14137]  ? xskq_create+0x56/0x170
[  248.090801][T14137]  ? xsk_init_queue+0xb0/0x110
[  248.090814][T14137]  ? xsk_setsockopt+0x4dc/0x8d0
[  248.090834][T14137]  ? do_sock_setsockopt+0x179/0x1b0
[  248.090851][T14137]  ? __x64_sys_setsockopt+0x13f/0x1b0
[  248.090867][T14137]  ? do_syscall_64+0xfa/0x3b0
[  248.090883][T14137]  ? entry_SYSCALL_64_after_hwframe+0x77/0x7f
[  248.090907][T14137]  __vmalloc_node_range_noprof+0x125/0x12f0
[  248.090964][T14137]  ? __pfx___vmalloc_node_range_noprof+0x10/0x10
[  248.090993][T14137]  ? __kasan_kmalloc+0x93/0xb0
[  248.091016][T14137]  vmalloc_user_noprof+0xad/0xf0
[  248.091038][T14137]  ? xskq_create+0xbf/0x170
[  248.091056][T14137]  xskq_create+0xbf/0x170
[  248.091075][T14137]  xsk_init_queue+0xb0/0x110
[  248.091094][T14137]  xsk_setsockopt+0x4dc/0x8d0
[  248.091126][T14137]  ? __pfx_xsk_setsockopt+0x10/0x10
[  248.091149][T14137]  ? __pfx_aa_sk_perm+0x10/0x10
[  248.091175][T14137]  ? aa_sock_opt_perm+0xff/0x1b0
[  248.091195][T14137]  ? bpf_lsm_socket_setsockopt+0x9/0x20
[  248.091212][T14137]  ? __pfx_xsk_setsockopt+0x10/0x10
[  248.091236][T14137]  do_sock_setsockopt+0x179/0x1b0
[  248.091259][T14137]  __x64_sys_setsockopt+0x13f/0x1b0
[  248.091284][T14137]  do_syscall_64+0xfa/0x3b0
[  248.091301][T14137]  ? lockdep_hardirqs_on+0x9c/0x150
[  248.091317][T14137]  ? entry_SYSCALL_64_after_hwframe+0x77/0x7f
[  248.091334][T14137]  ? clear_bhb_loop+0x60/0xb0
[  248.091353][T14137]  entry_SYSCALL_64_after_hwframe+0x77/0x7f
[  248.091368][T14137] RIP: 0033:0x7f3dd238eec9
[  248.091384][T14137] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48
[  248.091398][T14137] RSP: 002b:00007f3dd321f038 EFLAGS: 00000246 ORIG_RAX: 0000000000000036
[  248.091415][T14137] RAX: ffffffffffffffda RBX: 00007f3dd25e6090 RCX: 00007f3dd238eec9
[  248.091427][T14137] RDX: 0000000000000006 RSI: 000000000000011b RDI: 0000000000000006
[  248.091437][T14137] RBP: 00007f3dd2411f91 R08: 0000000000000004 R09: 0000000000000000
[  248.091448][T14137] R10: 0000200000000000 R11: 0000000000000246 R12: 0000000000000000
[  248.091458][T14137] R13: 00007f3dd25e6128 R14: 00007f3dd25e6090 R15: 00007fff38f02338
[  248.091488][T14137]  </TASK>
[  248.091584][T14137] Mem-Info:
[  248.405132][T14137] active_anon:5000 inactive_anon:0 isolated_anon:0
[  248.405132][T14137]  active_file:3012 inactive_file:39947 isolated_file:0
[  248.405132][T14137]  unevictable:768 dirty:65 writeback:0
[  248.405132][T14137]  slab_reclaimable:11749 slab_unreclaimable:118542
[  248.405132][T14137]  mapped:31291 shmem:1370 pagetables:1114
[  248.405132][T14137]  sec_pagetables:0 bounce:0
[  248.405132][T14137]  kernel_misc_reclaimable:0
[  248.405132][T14137]  free:1309112 free_pcp:13867 free_cma:0
[  248.465586][T14137] Node 0 active_anon:19900kB inactive_anon:0kB active_file:12048kB inactive_file:159584kB unevictable:1536kB isolated(anon):0kB isolated(file):0kB mapped:125164kB dirty:260kB writeback:0kB shmem:3944kB shmem_thp:0kB shmem_pmdmapped:0kB anon_thp:0kB kernel_stack:13704kB pagetables:4224kB sec_pagetables:0kB all_unreclaimable? no Balloon:0kB
[  248.502053][T14144] netlink: 24 bytes leftover after parsing attributes in process `syz.3.2372'.
[  248.503562][T14137] Node 1 active_anon:0kB inactive_anon:0kB active_file:0kB inactive_file:204kB unevictable:1536kB isolated(anon):0kB isolated(file):0kB mapped:0kB dirty:0kB writeback:0kB shmem:1536kB shmem_thp:0kB shmem_pmdmapped:0kB anon_thp:0kB kernel_stack:48kB pagetables:132kB sec_pagetables:0kB all_unreclaimable? no Balloon:0kB
[  248.626471][T14137] Node 0 DMA free:15360kB boost:0kB min:204kB low:252kB high:300kB reserved_highatomic:0KB free_highatomic:0KB active_anon:0kB inactive_anon:0kB active_file:0kB inactive_file:0kB unevictable:0kB writepending:0kB present:15992kB managed:15360kB mlocked:0kB bounce:0kB free_pcp:0kB local_pcp:0kB free_cma:0kB
[  248.658079][T14137] lowmem_reserve[]: 0 2497 2499 2499 2499
[  248.663952][T14137] Node 0 DMA32 free:1338520kB boost:0kB min:34248kB low:42808kB high:51368kB reserved_highatomic:0KB free_highatomic:0KB active_anon:19752kB inactive_anon:0kB active_file:12048kB inactive_file:158008kB unevictable:1536kB writepending:260kB present:3129332kB managed:2557412kB mlocked:0kB bounce:0kB free_pcp:35056kB local_pcp:20808kB free_cma:0kB
[  248.696524][T14137] lowmem_reserve[]: 0 0 1 1 1
[  248.701270][T14137] Node 0 Normal free:12kB boost:0kB min:20kB low:24kB high:28kB reserved_highatomic:0KB free_highatomic:0KB active_anon:48kB inactive_anon:0kB active_file:0kB inactive_file:1576kB unevictable:0kB writepending:0kB present:1048580kB managed:1644kB mlocked:0kB bounce:0kB free_pcp:8kB local_pcp:8kB free_cma:0kB
[  248.705358][T14159] tipc: Enabled bearer <eth:syzkaller0>, priority 0
[  248.769018][T14162] (unnamed net_device) (uninitialized): option arp_all_targets: invalid value (18446744073709551613)
[  248.807283][T14137] lowmem_reserve[]: 0 0 0 0 0
[  248.812390][T14137] Node 1 Normal free:3882556kB boost:0kB min:55632kB low:69540kB high:83448kB reserved_highatomic:0KB free_highatomic:0KB active_anon:0kB inactive_anon:0kB active_file:0kB inactive_file:204kB unevictable:1536kB writepending:0kB present:4194300kB managed:4111100kB mlocked:0kB bounce:0kB free_pcp:21292kB local_pcp:8768kB free_cma:0kB
[  248.941438][T14137] lowmem_reserve[]: 0 0 0 0 0
[  248.953785][T14137] Node 0 DMA: 0*4kB 0*8kB 0*16kB 0*32kB 0*64kB 0*128kB 0*256kB 0*512kB 1*1024kB (U) 1*2048kB (M) 3*4096kB (M) = 15360kB
[  249.001973][T14137] Node 0 DMA32: 634*4kB (UM) 110*8kB (UME) 102*16kB (ME) 205*32kB (UM) 65*64kB (UM) 26*128kB (UME) 6*256kB (UME) 2*512kB (UM) 4*1024kB (ME) 3*2048kB (M) 319*4096kB (M) = 1338520kB
[  249.021292][T14176] netlink: 12 bytes leftover after parsing attributes in process `syz.2.2384'.
[  249.035418][T14174] netlink: 212376 bytes leftover after parsing attributes in process `syz.3.2383'.
[  249.086886][T14137] Node 0 Normal: 1*4kB (M) 1*8kB (M) 0*16kB 0*32kB 0*64kB 0*128kB 0*256kB 0*512kB 0*1024kB 0*2048kB 0*4096kB = 12kB
[  249.122684][T14137] Node 1 Normal: 207*4kB (UE) 56*8kB (UME) 42*16kB (UME) 89*32kB (UME) 22*64kB (UME) 8*128kB (UME) 6*256kB (UME) 4*512kB (UME) 3*1024kB (UME) 1*2048kB (U) 944*4096kB (M) = 3882556kB
[  249.127373][T14178] ip6erspan0: entered promiscuous mode
[  249.155951][T14183] netlink: 20 bytes leftover after parsing attributes in process `syz.3.2383'.
[  249.173948][T14174] unknown channel width for channel at 909000KHz?
[  249.190570][T14137] Node 0 hugepages_total=0 hugepages_free=0 hugepages_surp=0 hugepages_size=1048576kB
[  249.266322][T14137] Node 0 hugepages_total=2 hugepages_free=2 hugepages_surp=0 hugepages_size=2048kB
[  249.295705][T14137] Node 1 hugepages_total=0 hugepages_free=0 hugepages_surp=0 hugepages_size=1048576kB
[  249.331315][T14137] Node 1 hugepages_total=2 hugepages_free=2 hugepages_surp=0 hugepages_size=2048kB
[  249.385934][T14137] 44326 total pagecache pages
[  249.396310][T14137] 0 pages in swap cache
[  249.414969][T14137] Free swap  = 124996kB
[  249.419147][T14137] Total swap = 124996kB
[  249.423302][T14137] 2097051 pages RAM
[  249.481352][T14137] 0 pages HighMem/MovableOnly
[  249.527137][T14137] 425672 pages reserved
[  249.532756][T14137] 0 pages cma reserved
[  249.766429][T14218] C: renamed from lo
[  249.945053][T14232] openvswitch: netlink: Flow actions may not be safe on all matching packets.
[  250.158552][T14240] bond_slave_1: mtu less than device minimum
[  250.346566][T14258] xt_l2tp: missing protocol rule (udp|l2tpip)
[  250.575320][T14281] netlink: 'syz.2.2412': attribute type 11 has an invalid length.
[  250.669557][T14271] pimreg: entered allmulticast mode
[  251.042389][T14306] Can not set IPV6_FL_F_REFLECT if flowlabel_consistency sysctl is enable
[  251.074553][T14307] tipc: Enabling of bearer <udp:syz0> rejected, failed to enable media
[  251.120288][T14309] bridge4: trying to set multicast query interval below minimum, setting to 100 (1000ms)
[  251.474163][T14311] can: request_module (can-proto-4) failed.
[  251.823400][T14327] netlink: 'syz.0.2430': attribute type 1 has an invalid length.
[  251.850174][T14333] hsr_slave_0: left promiscuous mode
[  251.860117][T14333] hsr_slave_1: left promiscuous mode
[  252.201367][T14356] __nla_validate_parse: 9 callbacks suppressed
[  252.201384][T14356] netlink: 24 bytes leftover after parsing attributes in process `syz.1.2437'.
[  252.538562][T14379] netlink: 168 bytes leftover after parsing attributes in process `syz.2.2441'.
[  252.570696][T14375] bond0: left promiscuous mode
[  252.575903][T14375] bond_slave_0: left promiscuous mode
[  252.581522][T14375] bond_slave_1: left promiscuous mode
[  252.588398][T14375] team0: left promiscuous mode
[  252.593175][T14375] team_slave_0: left promiscuous mode
[  252.598884][T14375] team_slave_1: left promiscuous mode
[  252.611765][T14375] dummy0: left promiscuous mode
[  252.639475][T14339] Bluetooth: hci0: Opcode 0x0c1a failed: -4
[  252.672047][T14375] bridge_slave_0: left promiscuous mode
[  252.933369][T14375] vlan3: left promiscuous mode
[  252.948044][T14375] gretap1: left promiscuous mode
[  252.987678][T14375] ip6erspan0: left promiscuous mode
[  253.054413][T14378] netlink: 'syz.4.2443': attribute type 10 has an invalid length.
[  253.167713][T14385] syzkaller0: entered promiscuous mode
[  253.173374][T14385] syzkaller0: entered allmulticast mode
[  253.182889][   T79] netdevsim netdevsim0 eth0: unset [0, 0] type 1 family 0 port 8472 - 0
[  253.200990][   T79] netdevsim netdevsim0 eth0: unset [1, 0] type 2 family 0 port 6081 - 0
[  253.220985][T14378] mac80211_hwsim hwsim11 wlan1: entered allmulticast mode
[  253.389503][   T79] netdevsim netdevsim0 eth1: unset [0, 0] type 1 family 0 port 8472 - 0
[  253.414165][   T79] netdevsim netdevsim0 eth1: unset [1, 0] type 2 family 0 port 6081 - 0
[  253.433024][   T79] netdevsim netdevsim0 eth2: unset [0, 0] type 1 family 0 port 8472 - 0
[  253.453521][   T79] netdevsim netdevsim0 eth2: unset [1, 0] type 2 family 0 port 6081 - 0
[  253.474936][   T79] netdevsim netdevsim0 eth3: unset [0, 0] type 1 family 0 port 8472 - 0
[  253.485481][   T79] netdevsim netdevsim0 eth3: unset [1, 0] type 2 family 0 port 6081 - 0
[  253.672661][T14438] delete_channel: no stack
[  254.352390][T14441] netlink: 28 bytes leftover after parsing attributes in process `syz.3.2456'.
[  254.357948][T14442] netlink: 28 bytes leftover after parsing attributes in process `syz.3.2456'.
[  255.249120][T14473] tipc: New replicast peer: 255.255.255.255
[  255.261672][T14473] tipc: Enabled bearer <udp:syz2>, priority 10
[  255.272368][T14472] netlink: 20 bytes leftover after parsing attributes in process `syz.4.2463'.
[  255.505212][T14478] netlink: 'syz.2.2465': attribute type 1 has an invalid length.
[  255.547862][T14478] 8021q: adding VLAN 0 to HW filter on device bond1
[  255.606954][T14495] netlink: 20 bytes leftover after parsing attributes in process `syz.4.2468'.
[  255.609214][ T1304] ieee802154 phy1 wpan1: encryption failed: -22
[  255.679183][T14478] bond1: (slave veth1): Enslaving as an active interface with a down link
[  255.744513][T14478] netlink: 28 bytes leftover after parsing attributes in process `syz.2.2465'.
[  255.758112][T14478] netlink: 28 bytes leftover after parsing attributes in process `syz.2.2465'.
[  255.792443][T14481] veth15: entered promiscuous mode
[  256.158237][T14509] netlink: 80 bytes leftover after parsing attributes in process `syz.2.2471'.
[  256.296838][T14523] netlink: 64 bytes leftover after parsing attributes in process `syz.4.2473'.
[  256.313170][T14520] syzkaller1: entered promiscuous mode
[  256.337723][T14520] syzkaller1: entered allmulticast mode
[  256.788389][T14551] netlink: 'syz.1.2484': attribute type 1 has an invalid length.
[  256.797493][T14551] netlink: 'syz.1.2484': attribute type 39 has an invalid length.
[  257.147065][T14578] netlink: 'syz.0.2493': attribute type 1 has an invalid length.
[  257.531827][T14603] netlink: 'syz.3.2499': attribute type 26 has an invalid length.
[  257.583636][T14603] __nla_validate_parse: 5 callbacks suppressed
[  257.583665][T14603] netlink: 8 bytes leftover after parsing attributes in process `syz.3.2499'.
[  257.627684][ T5862] block nbd2: Receive control failed (result -32)
[  257.821838][T14614] netlink: 4 bytes leftover after parsing attributes in process `syz.4.2501'.
[  257.881790][T14615] netlink: 1284 bytes leftover after parsing attributes in process `syz.4.2501'.
[  258.005821][T14626] tipc: Enabled bearer <eth:syzkaller0>, priority 0
[  258.022739][T14627] netlink: 'syz.2.2506': attribute type 1 has an invalid length.
[  258.048731][T14627] netlink: 244 bytes leftover after parsing attributes in process `syz.2.2506'.
[  258.131399][T14631] netlink: 'syz.3.2507': attribute type 1 has an invalid length.
[  258.170030][T14627] tipc: Disabling bearer <eth:syzkaller0>
[  258.211909][T14631] vlan3: entered promiscuous mode
[  258.243126][T14631] bridge0: entered promiscuous mode
[  258.289217][T14633] netlink: 'syz.0.2508': attribute type 10 has an invalid length.
[  258.311468][T14640] netlink: 'syz.4.2510': attribute type 5 has an invalid length.
[  258.333051][T14640] netlink: 16 bytes leftover after parsing attributes in process `syz.4.2510'.
[  258.338640][T14633] bond0: (slave wlan1): Enslaving as an active interface with an up link
[  258.452941][T14643] bridge0: port 1(macsec2) entered blocking state
[  258.501733][T14643] bridge0: port 1(macsec2) entered disabled state
[  258.509663][T14643] macsec2: entered allmulticast mode
[  258.520697][T14643] macsec2: left allmulticast mode
[  258.585747][T14654] netlink: 104 bytes leftover after parsing attributes in process `syz.3.2514'.
[  258.716353][T14657] netlink: 8 bytes leftover after parsing attributes in process `syz.2.2516'.
[  258.795925][T14660] netlink: 8 bytes leftover after parsing attributes in process `syz.0.2517'.
[  258.816873][T14665] netlink: 'syz.3.2519': attribute type 10 has an invalid length.
[  258.833614][T14665] bridge0: left allmulticast mode
[  258.840548][T14660] netlink: 4 bytes leftover after parsing attributes in process `syz.0.2517'.
[  258.862151][T14665] bridge0: entered allmulticast mode
[  258.884959][T14670] netlink: 45 bytes leftover after parsing attributes in process `syz.2.2520'.
[  258.895768][T14665] bond0: (slave bridge0): Enslaving as an active interface with a down link
[  259.656645][T14701] openvswitch: netlink: Flow set message rejected, Key attribute missing.
[  259.730989][T14710] tipc: Enabling of bearer <eth:syzkaller0> rejected, already enabled
[  259.750495][T14710] mac80211_hwsim hwsim8 syzkaller0: entered promiscuous mode
[  259.782668][T14710] mac80211_hwsim hwsim8 syzkaller0: entered allmulticast mode
[  259.817581][T14710] tipc: Resetting bearer <eth:syzkaller0>
[  259.934124][T14718] workqueue: Failed to create a rescuer kthread for wq "nfc2_nci_tx_wq": -EINTR
[  261.536106][T14763] nci: __nci_request: wait_for_completion_interruptible_timeout failed -512
[  261.891906][T14815] netlink: 'syz.2.2557': attribute type 1 has an invalid length.
[  262.241601][T14834] netlink: 'syz.1.2562': attribute type 28 has an invalid length.
[  262.250640][T14834] netlink: 'syz.1.2562': attribute type 3 has an invalid length.
[  262.344878][T14840] netlink: 'syz.4.2563': attribute type 5 has an invalid length.
[  262.541712][T14851] openvswitch: netlink: push_nsh: missing base or metadata attributes
[  262.574542][T14851] openvswitch: netlink: Flow actions may not be safe on all matching packets.
[  262.721197][T14872] netem: incorrect ge model size
[  262.732627][T14872] netem: change failed
[  262.858307][T14882] netlink: 'syz.2.2577': attribute type 7 has an invalid length.
[  262.997494][T14892] __nla_validate_parse: 16 callbacks suppressed
[  262.997511][T14892] netlink: 8 bytes leftover after parsing attributes in process `syz.2.2580'.
[  263.051204][T14896] netlink: 24 bytes leftover after parsing attributes in process `syz.0.2581'.
[  263.301372][T14913] netlink: 4 bytes leftover after parsing attributes in process `syz.4.2585'.
[  263.573232][T14925] netlink: 'syz.2.2590': attribute type 1 has an invalid length.
[  263.599622][T14925] netlink: 4 bytes leftover after parsing attributes in process `syz.2.2590'.
[  263.835177][T14940] block nbd3: server does not support multiple connections per device.
[  263.849359][T14940] block nbd3: shutting down sockets
[  264.083286][T14962] netlink: 4 bytes leftover after parsing attributes in process `syz.4.2595'.
[  264.390732][T14976] netlink: 4 bytes leftover after parsing attributes in process `syz.2.2599'.
[  264.438483][T14976] syzkaller1: entered promiscuous mode
[  264.448123][T14976] syzkaller1: entered allmulticast mode
[  264.472999][T14977] netlink: 'syz.1.2600': attribute type 1 has an invalid length.
[  264.491234][T14977] netlink: 12 bytes leftover after parsing attributes in process `syz.1.2600'.
[  264.736668][T14995] netlink: 'syz.2.2606': attribute type 1 has an invalid length.
[  264.748266][T14995] netlink: 184 bytes leftover after parsing attributes in process `syz.2.2606'.
[  265.100942][T15014] netlink: 'syz.1.2613': attribute type 1 has an invalid length.
[  265.209571][T15016] bond8: (slave ip6gretap1): Enslaving as a backup interface with an up link
[  265.263909][T15014] veth5: entered promiscuous mode
[  265.283096][T15014] bond8: (slave veth5): Enslaving as a backup interface with a down link
[  265.294218][T14982] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium
[  265.302493][   T37] netdevsim netdevsim0 eth0: set [0, 0] type 1 family 0 port 8472 - 0
[  265.368949][   T37] netdevsim netdevsim0 eth1: set [0, 0] type 1 family 0 port 8472 - 0
[  265.391016][   T37] netdevsim netdevsim0 eth2: set [0, 0] type 1 family 0 port 8472 - 0
[  265.408942][   T37] netdevsim netdevsim0 eth3: set [0, 0] type 1 family 0 port 8472 - 0
[  265.449470][T15028] tap0: tun_chr_ioctl cmd 1074025672
[  265.456766][T15027] netlink: 4 bytes leftover after parsing attributes in process `syz.1.2617'.
[  265.474803][T15028] tap0: ignored: set checksum disabled
[  265.555158][T15034] netlink: 'syz.2.2620': attribute type 1 has an invalid length.
[  265.556025][T15035] netlink: 'syz.0.2621': attribute type 21 has an invalid length.
[  265.562909][T15034] netlink: 224 bytes leftover after parsing attributes in process `syz.2.2620'.
[  266.146289][T15070] A link change request failed with some changes committed already. Interface lo may have been left with an inconsistent configuration, please check.
[  266.251193][T15070] tipc: Invalid UDP bearer configuration
[  266.251249][T15070] tipc: Enabling of bearer <udp:syz1> rejected, failed to enable media
[  266.535718][T15087] macvtap0: refused to change device tx_queue_len
[  266.664967][T15094] A link change request failed with some changes committed already. Interface lo may have been left with an inconsistent configuration, please check.
[  267.760186][T15147] tipc: Enabling of bearer <udp:syz0> rejected, failed to enable media
[  267.949259][T15159] validate_nla: 3 callbacks suppressed
[  267.949276][T15159] netlink: 'syz.2.2653': attribute type 4 has an invalid length.
[  268.110626][T15165] __nla_validate_parse: 11 callbacks suppressed
[  268.110645][T15165] netlink: 4 bytes leftover after parsing attributes in process `syz.4.2654'.
[  268.155533][T15165] netlink: 24 bytes leftover after parsing attributes in process `syz.4.2654'.
[  268.233922][T15174] openvswitch: netlink: Flow actions may not be safe on all matching packets.
[  268.372019][T15165] netlink: 12 bytes leftover after parsing attributes in process `syz.4.2654'.
[  268.385800][T15165] tc_dump_action: action bad kind
[  268.826120][T15205] openvswitch: netlink: Flow actions may not be safe on all matching packets.
[  268.916861][T15210] openvswitch: netlink: Key type 514 is out of range max 32
[  269.318246][T15239] veth0: entered promiscuous mode
[  269.348851][T15239] veth0: left promiscuous mode
[  269.422867][T15248] netlink: 'syz.0.2682': attribute type 1 has an invalid length.
[  269.513529][T15248] netlink: 244 bytes leftover after parsing attributes in process `syz.0.2682'.
[  269.787183][T15273] netlink: 'syz.4.2688': attribute type 2 has an invalid length.
[  270.081040][T15295] netlink: 12 bytes leftover after parsing attributes in process `syz.2.2691'.
[  270.132082][T15282] netlink: 8 bytes leftover after parsing attributes in process `syz.2.2691'.
[  270.147369][T15282] netlink: 8 bytes leftover after parsing attributes in process `syz.2.2691'.
[  270.265783][T15304] team0: Device wireguard0 is of different type
[  270.340638][T15311] netlink: 64 bytes leftover after parsing attributes in process `syz.3.2698'.
[  270.501586][T15318] netlink: 36 bytes leftover after parsing attributes in process `syz.3.2700'.
[  270.510122][T15321] netlink: 'syz.4.2701': attribute type 21 has an invalid length.
[  270.518771][T15321] netlink: 'syz.4.2701': attribute type 22 has an invalid length.
[  270.533048][T15321] netlink: 'syz.4.2701': attribute type 23 has an invalid length.
[  270.542970][T15321] netlink: 'syz.4.2701': attribute type 25 has an invalid length.
[  270.551907][T15321] netlink: 96 bytes leftover after parsing attributes in process `syz.4.2701'.
[  270.677050][T15327] openvswitch: netlink: Duplicate or invalid key (type 0).
[  270.689904][T15330] A link change request failed with some changes committed already. Interface bond0 may have been left with an inconsistent configuration, please check.
[  270.695798][T15327] openvswitch: netlink: Flow actions may not be safe on all matching packets.
[  270.735481][T15333] 0ªî{X¹¦: left promiscuous mode
[  270.771525][T15333] 8021q: adding VLAN 0 to HW filter on device team0
[  270.817585][T15333] A link change request failed with some changes committed already. Interface caif0 may have been left with an inconsistent configuration, please check.
[  271.262596][T15363] sch_tbf: burst 19872 is lower than device lo mtu (11337746) !
[  271.290578][T15369] netlink: 'syz.0.2720': attribute type 27 has an invalid length.
[  271.299870][T15369] netlink: 'syz.0.2720': attribute type 4 has an invalid length.
[  271.827001][T15396] 
[  271.829017][T13374] hid-generic 0005:16C0:05DF.0002: item fetching failed at offset 0/1
[  271.829351][T15396] ======================================================
[  271.844485][T15396] WARNING: possible circular locking dependency detected
[  271.851495][T15396] syzkaller #0 Not tainted
[  271.855890][T15396] ------------------------------------------------------
[  271.862887][T15396] syz.1.2731/15396 is trying to acquire lock:
[  271.868931][T15396] ffff88802e6e3c70 (&nr_node->node_lock){+...}-{3:3}, at: nr_rt_device_down+0x12a/0x720
[  271.878669][T15396] 
[  271.878669][T15396] but task is already holding lock:
[  271.886014][T15396] ffffffff8f68f7b8 (nr_node_list_lock){+...}-{3:3}, at: nr_rt_device_down+0xa9/0x720
[  271.895481][T15396] 
[  271.895481][T15396] which lock already depends on the new lock.
[  271.895481][T15396] 
[  271.905864][T15396] 
[  271.905864][T15396] the existing dependency chain (in reverse order) is:
[  271.914856][T15396] 
[  271.914856][T15396] -> #2 (nr_node_list_lock){+...}-{3:3}:
[  271.922657][T15396]        lock_acquire+0x120/0x360
[  271.927677][T15396]        _raw_spin_lock_bh+0x36/0x50
[  271.932955][T15396]        nr_rt_device_down+0xa9/0x720
[  271.938309][T15396]        nr_device_event+0x137/0x150
[  271.943578][T15396]        notifier_call_chain+0x1b3/0x3e0
[  271.949193][T15396]        netif_close_many+0x29c/0x410
[  271.954543][T15396]        netif_close+0x158/0x210
[  271.959460][T15396]        dev_close+0x10a/0x220
[  271.964204][T15396]        bpq_device_event+0x377/0x6a0
[  271.969560][T15396]        notifier_call_chain+0x1b3/0x3e0
[  271.975171][T15396]        __dev_notify_flags+0x18d/0x2e0
[  271.980703][T15396]        netif_change_flags+0xe8/0x1a0
[  271.986143][T15396]        dev_change_flags+0x130/0x260
[  271.991509][T15396]        dev_ioctl+0x7b4/0x1150
[  271.996369][T15396]        sock_do_ioctl+0x22c/0x300
[  272.001477][T15396]        sock_ioctl+0x576/0x790
[  272.006318][T15396]        __se_sys_ioctl+0xfc/0x170
[  272.011419][T15396]        do_syscall_64+0xfa/0x3b0
[  272.016430][T15396]        entry_SYSCALL_64_after_hwframe+0x77/0x7f
[  272.022827][T15396] 
[  272.022827][T15396] -> #1 (nr_neigh_list_lock){+...}-{3:3}:
[  272.030723][T15396]        lock_acquire+0x120/0x360
[  272.035751][T15396]        _raw_spin_lock_bh+0x36/0x50
[  272.041023][T15396]        nr_remove_neigh+0x25/0xe0
[  272.046115][T15396]        nr_add_node+0x1d9f/0x2570
[  272.051216][T15396]        nr_rt_ioctl+0xc12/0xd50
[  272.056136][T15396]        sock_do_ioctl+0xdc/0x300
[  272.061144][T15396]        sock_ioctl+0x576/0x790
[  272.065976][T15396]        __se_sys_ioctl+0xfc/0x170
[  272.071074][T15396]        do_syscall_64+0xfa/0x3b0
[  272.076078][T15396]        entry_SYSCALL_64_after_hwframe+0x77/0x7f
[  272.082475][T15396] 
[  272.082475][T15396] -> #0 (&nr_node->node_lock){+...}-{3:3}:
[  272.090453][T15396]        validate_chain+0xb9b/0x2140
[  272.095730][T15396]        __lock_acquire+0xab9/0xd20
[  272.100915][T15396]        lock_acquire+0x120/0x360
[  272.105947][T15396]        _raw_spin_lock_bh+0x36/0x50
[  272.111228][T15396]        nr_rt_device_down+0x12a/0x720
[  272.116672][T15396]        nr_device_event+0x137/0x150
[  272.121940][T15396]        notifier_call_chain+0x1b3/0x3e0
[  272.127551][T15396]        netif_close_many+0x29c/0x410
[  272.132904][T15396]        netif_close+0x158/0x210
[  272.137819][T15396]        dev_close+0x10a/0x220
[  272.142564][T15396]        bpq_device_event+0x377/0x6a0
[  272.147913][T15396]        notifier_call_chain+0x1b3/0x3e0
[  272.153526][T15396]        __dev_notify_flags+0x18d/0x2e0
[  272.159055][T15396]        netif_change_flags+0xe8/0x1a0
[  272.164495][T15396]        dev_change_flags+0x130/0x260
[  272.169848][T15396]        dev_ioctl+0x7b4/0x1150
[  272.174677][T15396]        sock_do_ioctl+0x22c/0x300
[  272.179777][T15396]        sock_ioctl+0x576/0x790
[  272.184615][T15396]        __se_sys_ioctl+0xfc/0x170
[  272.189707][T15396]        do_syscall_64+0xfa/0x3b0
[  272.194723][T15396]        entry_SYSCALL_64_after_hwframe+0x77/0x7f
[  272.201118][T15396] 
[  272.201118][T15396] other info that might help us debug this:
[  272.201118][T15396] 
[  272.211324][T15396] Chain exists of:
[  272.211324][T15396]   &nr_node->node_lock --> nr_neigh_list_lock --> nr_node_list_lock
[  272.211324][T15396] 
[  272.225124][T15396]  Possible unsafe locking scenario:
[  272.225124][T15396] 
[  272.232556][T15396]        CPU0                    CPU1
[  272.237903][T15396]        ----                    ----
[  272.243247][T15396]   lock(nr_node_list_lock);
[  272.247821][T15396]                                lock(nr_neigh_list_lock);
[  272.254999][T15396]                                lock(nr_node_list_lock);
[  272.262090][T15396]   lock(&nr_node->node_lock);
[  272.266838][T15396] 
[  272.266838][T15396]  *** DEADLOCK ***
[  272.266838][T15396] 
[  272.274959][T15396] 3 locks held by syz.1.2731/15396:
[  272.280135][T15396]  #0: ffffffff8f53a088 (rtnl_mutex){+.+.}-{4:4}, at: dev_ioctl+0x7a4/0x1150
[  272.288911][T15396]  #1: ffffffff8f68f758 (nr_neigh_list_lock){+...}-{3:3}, at: nr_rt_device_down+0x28/0x720
[  272.298904][T15396]  #2: ffffffff8f68f7b8 (nr_node_list_lock){+...}-{3:3}, at: nr_rt_device_down+0xa9/0x720
[  272.308805][T15396] 
[  272.308805][T15396] stack backtrace:
[  272.314692][T15396] CPU: 0 UID: 0 PID: 15396 Comm: syz.1.2731 Not tainted syzkaller #0 PREEMPT(full) 
[  272.314712][T15396] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 08/18/2025
[  272.314721][T15396] Call Trace:
[  272.314729][T15396]  <TASK>
[  272.314737][T15396]  dump_stack_lvl+0x189/0x250
[  272.314758][T15396]  ? __pfx_dump_stack_lvl+0x10/0x10
[  272.314773][T15396]  ? __pfx__printk+0x10/0x10
[  272.314792][T15396]  ? print_lock_name+0xde/0x100
[  272.314810][T15396]  print_circular_bug+0x2ee/0x310
[  272.314827][T15396]  check_noncircular+0x134/0x160
[  272.314844][T15396]  validate_chain+0xb9b/0x2140
[  272.314865][T15396]  __lock_acquire+0xab9/0xd20
[  272.314885][T15396]  ? nr_rt_device_down+0x12a/0x720
[  272.314901][T15396]  lock_acquire+0x120/0x360
[  272.314918][T15396]  ? nr_rt_device_down+0x12a/0x720
[  272.314939][T15396]  ? nr_rt_device_down+0x12a/0x720
[  272.314956][T15396]  _raw_spin_lock_bh+0x36/0x50
[  272.314975][T15396]  ? nr_rt_device_down+0x12a/0x720
[  272.314992][T15396]  nr_rt_device_down+0x12a/0x720
[  272.315012][T15396]  nr_device_event+0x137/0x150
[  272.315029][T15396]  notifier_call_chain+0x1b3/0x3e0
[  272.315046][T15396]  netif_close_many+0x29c/0x410
[  272.315061][T15396]  ? __pfx_netif_close_many+0x10/0x10
[  272.315076][T15396]  ? bond_netdev_event+0x227/0xe80
[  272.315093][T15396]  netif_close+0x158/0x210
[  272.315105][T15396]  ? __pfx_netif_close+0x10/0x10
[  272.315117][T15396]  ? tun_device_event+0x77/0x1020
[  272.315131][T15396]  ? __pfx___neigh_ifdown+0x10/0x10
[  272.315149][T15396]  ? macsec_notify+0x104/0x660
[  272.315166][T15396]  dev_close+0x10a/0x220
[  272.315181][T15396]  bpq_device_event+0x377/0x6a0
[  272.315195][T15396]  notifier_call_chain+0x1b3/0x3e0
[  272.315212][T15396]  __dev_notify_flags+0x18d/0x2e0
[  272.315228][T15396]  ? __pfx___dev_notify_flags+0x10/0x10
[  272.315242][T15396]  ? __dev_change_flags+0x4cc/0x6d0
[  272.315258][T15396]  ? __pfx___dev_change_flags+0x10/0x10
[  272.315274][T15396]  ? full_name_hash+0x92/0xe0
[  272.315290][T15396]  netif_change_flags+0xe8/0x1a0
[  272.315307][T15396]  dev_change_flags+0x130/0x260
[  272.315322][T15396]  dev_ioctl+0x7b4/0x1150
[  272.315338][T15396]  sock_do_ioctl+0x22c/0x300
[  272.315357][T15396]  ? __pfx_sock_do_ioctl+0x10/0x10
[  272.315374][T15396]  ? __lock_acquire+0xab9/0xd20
[  272.315410][T15396]  sock_ioctl+0x576/0x790
[  272.315428][T15396]  ? __pfx_sock_ioctl+0x10/0x10
[  272.315445][T15396]  ? __fget_files+0x2a/0x420
[  272.315457][T15396]  ? __fget_files+0x3a0/0x420
[  272.315467][T15396]  ? __fget_files+0x2a/0x420
[  272.315479][T15396]  ? bpf_lsm_file_ioctl+0x9/0x20
[  272.315495][T15396]  ? __pfx_sock_ioctl+0x10/0x10
[  272.315512][T15396]  __se_sys_ioctl+0xfc/0x170
[  272.315528][T15396]  do_syscall_64+0xfa/0x3b0
[  272.315543][T15396]  ? lockdep_hardirqs_on+0x9c/0x150
[  272.315556][T15396]  ? entry_SYSCALL_64_after_hwframe+0x77/0x7f
[  272.315569][T15396]  ? clear_bhb_loop+0x60/0xb0
[  272.315584][T15396]  entry_SYSCALL_64_after_hwframe+0x77/0x7f
[  272.315597][T15396] RIP: 0033:0x7f040458eec9
[  272.315610][T15396] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48
[  272.315622][T15396] RSP: 002b:00007f0405379038 EFLAGS: 00000246 ORIG_RAX: 0000000000000010
[  272.315637][T15396] RAX: ffffffffffffffda RBX: 00007f04047e5fa0 RCX: 00007f040458eec9
[  272.315648][T15396] RDX: 0000200000000700 RSI: 0000000000008914 RDI: 000000000000000a
[  272.315658][T15396] RBP: 00007f0404611f91 R08: 0000000000000000 R09: 0000000000000000
[  272.315666][T15396] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000
[  272.315674][T15396] R13: 00007f04047e6038 R14: 00007f04047e5fa0 R15: 00007ffc96c49c08
[  272.315690][T15396]  </TASK>
[  272.673329][T13374] hid-generic 0005:16C0:05DF.0002: probe with driver hid-generic failed with error -22