last executing test programs:

4.584544514s ago: executing program 1 (id=1300):
r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000000), 0x48241, 0x0)
r1 = socket$nl_generic(0x10, 0x3, 0x10) (async)
r2 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000080), 0xffffffffffffffff)
sendmsg$NL80211_CMD_UPDATE_CONNECT_PARAMS(r1, &(0x7f00000034c0)={&(0x7f0000000040)={0x10, 0x0, 0x0, 0x4000}, 0xc, &(0x7f0000003480)={&(0x7f00000001c0)={0x32b4, r2, 0x400, 0x70bd29, 0x25dfdbfc, {{}, {@void, @void}}, [@fils_params=[@NL80211_ATTR_FILS_ERP_REALM={0x1004, 0xfa, "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"}], @fils_params=[@NL80211_ATTR_FILS_ERP_REALM={0x4}], @fils_params=[@NL80211_ATTR_FILS_ERP_NEXT_SEQ_NUM={0x6, 0xfb, 0x5}, @NL80211_ATTR_FILS_ERP_RRK={0xbf, 0xfc, "d9a5f80f0aa402481426eaf9ddc383632b75c8f353c755296f8717b8fd6b35639d47b6d1336a6dcd8fe6ed45387d81068627780fce29e20fd0468f56d560343048131209d2aeb568153502b10daf80c012099f2c361a0a16352d9b735613d8869d77fe4dd233ff0a08e243da3cdffbe93b9f1e333f49679c07c4c8ab66bc32487536aed918ffcd52070aa67bac92d0a034e7759776ca340bf2d7856107aff4cf903581191dba971e73c7836060310ef593482f9e2e828085babe51"}, @NL80211_ATTR_FILS_ERP_USERNAME={0x13, 0xf9, "afcab5ef5b4a560076ed2e9156951e"}, @NL80211_ATTR_FILS_ERP_USERNAME={0x13, 0xf9, "903b3c9903725990be89b611561331"}, @NL80211_ATTR_FILS_ERP_USERNAME={0xe, 0xf9, "8549d6e4ea732e31b407"}, @NL80211_ATTR_FILS_ERP_NEXT_SEQ_NUM={0x6, 0xfb, 0x9}], @fils_params=[@NL80211_ATTR_FILS_ERP_USERNAME={0x14, 0xf9, "585956f32df2e62f0d707371321c8143"}, @NL80211_ATTR_FILS_ERP_USERNAME={0xc, 0xf9, "507fd5a3afa70412"}, @NL80211_ATTR_FILS_ERP_REALM={0x4}, @NL80211_ATTR_FILS_ERP_NEXT_SEQ_NUM={0x6, 0xfb, 0xe}, @NL80211_ATTR_FILS_ERP_USERNAME={0xd, 0xf9, "3e401d2538dee0d461"}, @NL80211_ATTR_FILS_ERP_RRK={0x1004, 0xfc, "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"}, @NL80211_ATTR_FILS_ERP_RRK={0xbf, 0xfc, "dcf418fab6abd882efa59b78b21fab1de79be675b03c7c827e38e6a10dae1c372f0152cbdb1352eec1633dba3dfd129594e6551b2081c1bcd687b1ecc9b19963d8259552f68233013a7f8e614075fe38e18c0d7a0f461b3fb86c9772230b4b28ba2a8b9b1859100432c6ffec01885ffd17c2fa9953174eae75807802dbdcb5fd0c662a8bc5dca85f1484627256ed9e817b18e0ab3789d7a35e5fe3b63bd65263b776c3a69368d03375b9cd32d2b37e59277a32e4f8fd4fd3b5fddc"}, @NL80211_ATTR_FILS_ERP_RRK={0x1004, 0xfc, "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"}, @NL80211_ATTR_FILS_ERP_REALM={0x2d, 0xfa, "4381f684813f68ca0f8015d4d5876eca0ea6fa4150d144ffae753c1c59217eadc0f9ffb38adf31a77e"}, @NL80211_ATTR_FILS_ERP_USERNAME={0x14, 0xf9, "4964fc02712e8ebbb335a0039638c39d"}], @fils_params=[@NL80211_ATTR_FILS_ERP_NEXT_SEQ_NUM={0x6, 0xfb, 0x6}], @fils_params=[@NL80211_ATTR_FILS_ERP_NEXT_SEQ_NUM={0x6, 0xfb, 0x3f}], @NL80211_ATTR_IE={0x2c, 0x2a, [@mesh_chsw={0x76, 0x6, {0x7, 0x7, 0x1, 0x7d9a}}, @dsss={0x3, 0x1, 0xab}, @tim={0x5, 0x1b, {0x3, 0xcb, 0xff, "c9a6c17c5828b8773d477edc192709fc33f865ff946daa66"}}]}, @NL80211_ATTR_IE={0x9, 0x2a, [@channel_switch={0x25, 0x3, {0x0, 0x95, 0x3}}]}]}, 0x32b4}}, 0x0)
ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f00000000c0)={'syzkaller1\x00', 0x6bf1c2d5adba8c32})
r3 = socket$kcm(0x2, 0xa, 0x2)
ioctl$SIOCSIFHWADDR(r3, 0x8914, &(0x7f0000000180)={'syzkaller1\x00', @link_local}) (async)
write$tun(r0, &(0x7f0000000100)=ANY=[@ANYBLOB="00200000ffffffffffffbb4500003d0001e000000103000000002990780200000000000000ebc7a1e0ff5befe1060000000000000006de422b4a81099bda00000000000000"], 0x4f)

4.283447628s ago: executing program 1 (id=1303):
r0 = socket$kcm(0x10, 0x4, 0x0)
sendmsg$kcm(r0, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000200)=[{&(0x7f0000000040)="845fb1575eeb65d73790a825d41f70b4f443cf2b9bdbde80d0ff0e2fcef4ab5073b4f205bc14242c507ec9d9d2015d2436f47594f8dea8e75b594b4930935aa08eaabd6e9a4c1688cb6fe4c17bc36dfbac228b78eb67e12a1ce8423773"}, {&(0x7f00000000c0)="0ab653443afd65ca75e7418f610ed339854cb6f84063c34e7af4931a54b367641ba0d917337272407e9a8d468eb8fb8d8841f372ffd0b55fa49a3817e9e55fe2b6f1d72ccd660e8074defd9c1ddac32d1f575969c2f900284b79f78b54d14af1ae07ffc24fa821ede4e2421fdad4984bda33efd85c609a850bf8dd1797f4f6f834e2a69422b34a7d5b53c1d8f5a6fa39a3ef4aa70c72b4fd130cef76ef7a555508bc7b2212aab17cb2790ce987ff7acc4086081e1cfafcd6f97fca26d28c69fe179990e986c42b45121065f2b17c40463607a6f0a0ccb4ffe5b355a8d04e5e338a30cc253f75df0e579019fc3ce6edfa02882f90d5"}, {&(0x7f00000001c0)="e7e5ff"}], 0x1261, 0x0, 0xfffffffffffffd72}, 0x8000) (async)
socket$nl_netfilter(0x10, 0x3, 0xc)

4.100994899s ago: executing program 1 (id=1304):
r0 = bpf$PROG_LOAD(0x5, &(0x7f0000000180)={0x1, 0x4, &(0x7f0000000100)=@framed={{0x18, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x9}, [@call={0x85, 0x0, 0x0, 0x2e}]}, &(0x7f0000000080)='GPL\x00', 0x2, 0x0, 0x0, 0x41000, 0x20, '\x00', 0x0, @fallback=0x34, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xc}, 0x94)
r1 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000001c0)='cgroup.controllers\x00', 0x275a, 0x0)
write$cgroup_int(r1, &(0x7f0000000200), 0xffffffc1)
r2 = socket$nl_netfilter(0x10, 0x3, 0xc)
sendmsg$NFT_BATCH(r2, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000240)=ANY=[@ANYBLOB="140000001000010000000000000000000500000a28000000000a030000000000000000000a00000708000240000000020900010073797a31000000002c000000030a010100000000000000000a0000070900010073797a31000000000900030073797a320000000014000000110001"], 0x7c}, 0x1, 0x0, 0x0, 0x4000}, 0x0)
sendmsg$NFT_BATCH(r2, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000009b00)={&(0x7f00000002c0)={{0x14, 0x10, 0x1, 0x0, 0x0, {0x2}}, [@NFT_MSG_NEWRULE={0x88, 0x6, 0xa, 0x401, 0x0, 0x0, {0xa, 0x0, 0x405}, [@NFTA_RULE_TABLE={0x9, 0x1, 'syz1\x00'}, @NFTA_RULE_EXPRESSIONS={0x5c, 0x4, 0x0, 0x1, [{0x58, 0x1, 0x0, 0x1, @inner={{0xa}, @val={0x48, 0x2, 0x0, 0x1, [@NFTA_INNER_HDRSIZE={0x8, 0x4, 0x1, 0x0, 0x17}, @NFTA_INNER_EXPR={0x24, 0x5, 0x0, 0x1, @payload={{0xc}, @val={0x14, 0x2, 0x0, 0x1, [@NFTA_PAYLOAD_OFFSET={0x8, 0x3, 0x1, 0x0, 0x92}, @NFTA_PAYLOAD_BASE={0x8, 0x2, 0x1, 0x0, 0x1}]}}}, @NFTA_INNER_FLAGS={0x8, 0x3, 0x1, 0x0, 0x8}, @NFTA_INNER_TYPE={0x8, 0x2, 0x1, 0x0, 0x84}, @NFTA_INNER_NUM={0x8}]}}}]}, @NFTA_RULE_CHAIN={0x9, 0x2, 'syz2\x00'}]}], {0x14, 0x11, 0x1, 0x0, 0x0, {0x1}}}, 0xb0}, 0x1, 0x0, 0x0, 0x8890}, 0x24000000)
mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x2, 0x22052, r1, 0x0)
mmap(&(0x7f00007a6000/0x3000)=nil, 0x3000, 0x100000c, 0x22051, r1, 0x0)
ioctl$TUNSETSTEERINGEBPF(r1, 0x800454e0, &(0x7f00000000c0)=r0)
r3 = socket$nl_generic(0x10, 0x3, 0x10)
r4 = socket$nl_generic(0x10, 0x3, 0x10)
r5 = syz_genetlink_get_family_id$batadv(&(0x7f0000000040), r4)
ioctl$ifreq_SIOCGIFINDEX_batadv_mesh(r4, 0x8933, &(0x7f0000001300)={'batadv0\x00', <r6=>0x0})
sendmsg$BATADV_CMD_GET_DAT_CACHE(r4, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000240)={&(0x7f0000000080)={0x1c, r5, 0x83625fc5352ba305, 0x70bd2b, 0x0, {}, [@BATADV_ATTR_MESH_IFINDEX={0x8, 0x3, r6}]}, 0x1c}}, 0x0)
r7 = socket$can_raw(0x1d, 0x3, 0x1)
setsockopt$CAN_RAW_ERR_FILTER(r7, 0x65, 0x7, &(0x7f00000001c0)=0x8, 0x4)
ioctl$sock_SIOCGIFINDEX(r7, 0x8933, &(0x7f0000000080)={'vxcan1\x00', <r8=>0x0})
sendmsg$can_raw(r7, &(0x7f0000000140)={&(0x7f0000000000)={0x1d, r8}, 0x10, &(0x7f00000005c0)={&(0x7f0000000100)=@can={{}, 0x80, 0x3, 0x4, 0x2, "07000000008000"}, 0x210}}, 0x0)
bpf$BPF_GET_PROG_INFO(0xf, &(0x7f0000000500)={r0, 0xe0, &(0x7f0000000400)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4, &(0x7f0000000040)=[0x0, 0x0, 0x0, 0x0], ""/16, <r9=>0x0, 0x0, 0x0, 0x0, 0x9, 0x1, &(0x7f0000000240)=[0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0], &(0x7f00000002c0)=[0x0], 0x0, 0x9a, &(0x7f0000000300)=[{}, {}, {}, {}], 0x20, 0x10, &(0x7f0000000340), &(0x7f0000000380), 0x8, 0xb0, 0x8, 0x8, &(0x7f00000003c0)}}, 0x10)
sendmsg$BATADV_CMD_GET_HARDIF(r3, &(0x7f00000005c0)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x1}, 0xc, &(0x7f0000000580)={&(0x7f0000000540)={0x3c, r5, 0x2, 0x70bd2d, 0x25dfdbfc, {}, [@BATADV_ATTR_ISOLATION_MARK={0x8, 0x2b, 0x6}, @BATADV_ATTR_BRIDGE_LOOP_AVOIDANCE_ENABLED={0x5}, @BATADV_ATTR_ISOLATION_MASK={0x8, 0x2c, 0x7f}, @BATADV_ATTR_BRIDGE_LOOP_AVOIDANCE_ENABLED={0x5, 0x2e, 0x1}, @BATADV_ATTR_HARD_IFINDEX={0x8, 0x6, r9}]}, 0x3c}, 0x1, 0x0, 0x0, 0x20000050}, 0x10)
bpf$PROG_LOAD(0x5, &(0x7f0000000180)={0x1, 0x4, &(0x7f0000000100)=@framed={{0x18, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x9}, [@call={0x85, 0x0, 0x0, 0x2e}]}, &(0x7f0000000080)='GPL\x00', 0x2, 0x0, 0x0, 0x41000, 0x20, '\x00', 0x0, @fallback=0x34, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xc}, 0x94) (async)
openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000001c0)='cgroup.controllers\x00', 0x275a, 0x0) (async)
write$cgroup_int(r1, &(0x7f0000000200), 0xffffffc1) (async)
socket$nl_netfilter(0x10, 0x3, 0xc) (async)
sendmsg$NFT_BATCH(r2, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000240)=ANY=[@ANYBLOB="140000001000010000000000000000000500000a28000000000a030000000000000000000a00000708000240000000020900010073797a31000000002c000000030a010100000000000000000a0000070900010073797a31000000000900030073797a320000000014000000110001"], 0x7c}, 0x1, 0x0, 0x0, 0x4000}, 0x0) (async)
sendmsg$NFT_BATCH(r2, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000009b00)={&(0x7f00000002c0)={{0x14, 0x10, 0x1, 0x0, 0x0, {0x2}}, [@NFT_MSG_NEWRULE={0x88, 0x6, 0xa, 0x401, 0x0, 0x0, {0xa, 0x0, 0x405}, [@NFTA_RULE_TABLE={0x9, 0x1, 'syz1\x00'}, @NFTA_RULE_EXPRESSIONS={0x5c, 0x4, 0x0, 0x1, [{0x58, 0x1, 0x0, 0x1, @inner={{0xa}, @val={0x48, 0x2, 0x0, 0x1, [@NFTA_INNER_HDRSIZE={0x8, 0x4, 0x1, 0x0, 0x17}, @NFTA_INNER_EXPR={0x24, 0x5, 0x0, 0x1, @payload={{0xc}, @val={0x14, 0x2, 0x0, 0x1, [@NFTA_PAYLOAD_OFFSET={0x8, 0x3, 0x1, 0x0, 0x92}, @NFTA_PAYLOAD_BASE={0x8, 0x2, 0x1, 0x0, 0x1}]}}}, @NFTA_INNER_FLAGS={0x8, 0x3, 0x1, 0x0, 0x8}, @NFTA_INNER_TYPE={0x8, 0x2, 0x1, 0x0, 0x84}, @NFTA_INNER_NUM={0x8}]}}}]}, @NFTA_RULE_CHAIN={0x9, 0x2, 'syz2\x00'}]}], {0x14, 0x11, 0x1, 0x0, 0x0, {0x1}}}, 0xb0}, 0x1, 0x0, 0x0, 0x8890}, 0x24000000) (async)
mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x2, 0x22052, r1, 0x0) (async)
mmap(&(0x7f00007a6000/0x3000)=nil, 0x3000, 0x100000c, 0x22051, r1, 0x0) (async)
ioctl$TUNSETSTEERINGEBPF(r1, 0x800454e0, &(0x7f00000000c0)=r0) (async)
socket$nl_generic(0x10, 0x3, 0x10) (async)
socket$nl_generic(0x10, 0x3, 0x10) (async)
syz_genetlink_get_family_id$batadv(&(0x7f0000000040), r4) (async)
ioctl$ifreq_SIOCGIFINDEX_batadv_mesh(r4, 0x8933, &(0x7f0000001300)) (async)
sendmsg$BATADV_CMD_GET_DAT_CACHE(r4, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000240)={&(0x7f0000000080)={0x1c, r5, 0x83625fc5352ba305, 0x70bd2b, 0x0, {}, [@BATADV_ATTR_MESH_IFINDEX={0x8, 0x3, r6}]}, 0x1c}}, 0x0) (async)
socket$can_raw(0x1d, 0x3, 0x1) (async)
setsockopt$CAN_RAW_ERR_FILTER(r7, 0x65, 0x7, &(0x7f00000001c0)=0x8, 0x4) (async)
ioctl$sock_SIOCGIFINDEX(r7, 0x8933, &(0x7f0000000080)={'vxcan1\x00'}) (async)
sendmsg$can_raw(r7, &(0x7f0000000140)={&(0x7f0000000000)={0x1d, r8}, 0x10, &(0x7f00000005c0)={&(0x7f0000000100)=@can={{}, 0x80, 0x3, 0x4, 0x2, "07000000008000"}, 0x210}}, 0x0) (async)
bpf$BPF_GET_PROG_INFO(0xf, &(0x7f0000000500)={r0, 0xe0, &(0x7f0000000400)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4, &(0x7f0000000040)=[0x0, 0x0, 0x0, 0x0], ""/16, 0x0, 0x0, 0x0, 0x0, 0x9, 0x1, &(0x7f0000000240)=[0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0], &(0x7f00000002c0)=[0x0], 0x0, 0x9a, &(0x7f0000000300)=[{}, {}, {}, {}], 0x20, 0x10, &(0x7f0000000340), &(0x7f0000000380), 0x8, 0xb0, 0x8, 0x8, &(0x7f00000003c0)}}, 0x10) (async)
sendmsg$BATADV_CMD_GET_HARDIF(r3, &(0x7f00000005c0)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x1}, 0xc, &(0x7f0000000580)={&(0x7f0000000540)={0x3c, r5, 0x2, 0x70bd2d, 0x25dfdbfc, {}, [@BATADV_ATTR_ISOLATION_MARK={0x8, 0x2b, 0x6}, @BATADV_ATTR_BRIDGE_LOOP_AVOIDANCE_ENABLED={0x5}, @BATADV_ATTR_ISOLATION_MASK={0x8, 0x2c, 0x7f}, @BATADV_ATTR_BRIDGE_LOOP_AVOIDANCE_ENABLED={0x5, 0x2e, 0x1}, @BATADV_ATTR_HARD_IFINDEX={0x8, 0x6, r9}]}, 0x3c}, 0x1, 0x0, 0x0, 0x20000050}, 0x10) (async)

3.697171314s ago: executing program 1 (id=1308):
socket$nl_rdma(0x10, 0x3, 0x14)
r0 = socket(0x40000000015, 0x5, 0x0)
bind$inet(r0, &(0x7f00008a5ff0)={0x2, 0x0, @loopback}, 0x10)
sendto$inet(r0, 0x0, 0x0, 0x0, &(0x7f0000000200)={0x2, 0x0, @loopback}, 0x10)
sendto$inet(r0, &(0x7f0000000240)="48fcc06d", 0x4, 0x0, &(0x7f00000003c0)={0x2, 0x4e21, @loopback}, 0x10)
sendmsg$RDMA_NLDEV_CMD_STAT_SET(r0, &(0x7f00000001c0)={&(0x7f0000000040)={0x10, 0x0, 0x0, 0x400}, 0xc, &(0x7f0000000180)={&(0x7f0000000100)={0x48, 0x1410, 0x400, 0x70bd2b, 0x25dfdbfc, "", [@RDMA_NLDEV_ATTR_PORT_INDEX={0x8, 0x3, 0x4}, @RDMA_NLDEV_ATTR_STAT_RES={0x8}, @RDMA_NLDEV_ATTR_RES_LQPN={0x8, 0x15, 0x2}, @RDMA_NLDEV_ATTR_RES_LQPN={0x8, 0x15, 0xa}, @RDMA_NLDEV_ATTR_DEV_INDEX={0x8, 0x1, 0x2}, @RDMA_NLDEV_ATTR_STAT_RES={0x8}, @RDMA_NLDEV_ATTR_STAT_COUNTER_ID={0x8, 0x4f, 0x3}]}, 0x48}, 0x1, 0x0, 0x0, 0x4000010}, 0x20008804)
sendmsg$RDMA_NLDEV_CMD_RES_CQ_GET(r0, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000000)={0x40, 0x140c, 0x10, 0x70bd2a, 0x25dfdbfb, "", [@RDMA_NLDEV_ATTR_PORT_INDEX={0x8, 0x3, 0x2}, @RDMA_NLDEV_ATTR_PORT_INDEX={0x8, 0x3, 0x4}, @RDMA_NLDEV_ATTR_PORT_INDEX={0x8, 0x3, 0x1}, @RDMA_NLDEV_ATTR_PORT_INDEX={0x8, 0x3, 0x2}, @RDMA_NLDEV_ATTR_RES_CQN={0x8, 0x3d, 0x1}, @RDMA_NLDEV_ATTR_RES_CQN={0x8}]}, 0x40}, 0x1, 0x0, 0x0, 0x40}, 0x20008080)

3.573128149s ago: executing program 1 (id=1311):
unshare(0x6a040000)
r0 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000001c0)='cgroup.controllers\x00', 0x275a, 0x0)
r1 = socket$nl_route(0x10, 0x3, 0x0)
r2 = socket$rds(0x15, 0x5, 0x0)
getsockopt$rose(0xffffffffffffffff, 0x104, 0x7, 0x0, 0x0)
bind$rds(r0, &(0x7f0000000300)={0x2, 0x4e20, @local}, 0xffffffffffffff9b)
sendmsg$rds(r2, &(0x7f00000002c0)={&(0x7f00000000c0)={0x2, 0x0, @initdev={0xac, 0x1e, 0x0, 0x0}}, 0x10, &(0x7f0000000640)}, 0x0)
r3 = socket$inet6_sctp(0xa, 0x5, 0x84)
r4 = bpf$MAP_CREATE_RINGBUF(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="1b0000000000000000000000000004"], 0x48)
r5 = socket$nl_netfilter(0x10, 0x3, 0xc)
sendmsg$IPSET_CMD_CREATE(r5, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000440)=ANY=[@ANYBLOB="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"], 0x6c}}, 0x8000)
bpf$PROG_LOAD(0x5, &(0x7f0000000b00)={0x11, 0xf, &(0x7f00000003c0)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r4, @ANYBLOB="0000000000000000b702000014000000b7030000000000008500000083000000bf0900000000000055090100000000009500000800000000bf91000000000000b702000043e7b5538500000085000000b7000000", @ANYRESDEC=r1], &(0x7f0000000080)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x1b, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94)
pselect6(0x40, &(0x7f00000001c0)={0x0, 0x0, 0x2, 0xfffffffffffffffd, 0x5}, 0x0, &(0x7f00000002c0)={0x3ff, 0x0, 0x0, 0x9, 0x0, 0x0, 0x6}, 0x0, 0x0)
mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x3, 0x8031, 0xffffffffffffffff, 0x0)
write$cgroup_int(r0, &(0x7f0000000200), 0xffffffc1)
r6 = socket$inet6(0xa, 0x2, 0x0)
r7 = openat$tun(0xffffffffffffff9c, &(0x7f0000000000), 0x40241, 0x0)
r8 = socket$key(0xf, 0x3, 0x2)
sendmsg$key(r8, &(0x7f0000001600)={0x0, 0x0, &(0x7f00000015c0)={&(0x7f0000001580)=ANY=[@ANYBLOB="02df2500"/16], 0x10}}, 0x810)
ioctl$TUNSETIFF(r7, 0x400454ca, &(0x7f0000000200)={'syzkaller1\x00', 0xc201})
write$tun(r7, 0x0, 0xfdef)
ioctl$sock_SIOCETHTOOL(r6, 0x89f0, &(0x7f0000000040)={'bridge0\x00', &(0x7f0000000100)=@ethtool_coalesce={0xe, 0x0, 0x1000, 0x6, 0x400000, 0x7ff, 0x4, 0xc0000000, 0x402, 0x9, 0x5, 0x5, 0x3, 0x4006, 0x80, 0xfffffffc, 0x0, 0x37e9, 0x80000004, 0x1, 0x6, 0x424f, 0x3}})
mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x2, 0x22051, r0, 0x0)
openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000040)='memory.events\x00', 0x275a, 0x0)
mmap(&(0x7f0000000000/0x4000)=nil, 0x4000, 0x1, 0x10012, r3, 0x0)
bpf$MAP_CREATE(0x0, &(0x7f0000000240)=ANY=[@ANYBLOB="080bf4e404000000050000000000008073100000", @ANYRES32, @ANYBLOB="0000000600"/20, @ANYRES32=0x0, @ANYRES32, @ANYBLOB="00000000010000000500"/28], 0x50)
mmap(&(0x7f00007a6000/0x3000)=nil, 0x3000, 0x100000c, 0x22051, r0, 0x0)
mmap(&(0x7f0000001000/0x2000)=nil, 0x2000, 0x2000009, 0x32, 0xffffffffffffffff, 0x0)
mmap(&(0x7f0000000000/0xff5000)=nil, 0xff5000, 0xba0c29e690d41d4b, 0x20000000ec071, 0xffffffffffffffff, 0x0)

2.684689336s ago: executing program 0 (id=1315):
bpf$PROG_LOAD(0x5, &(0x7f0000000440)={0x10, 0x4, &(0x7f0000000400)=ANY=[@ANYBLOB="b400000000f5000079104800000000006307045a0000000095b3000000000000"], &(0x7f0000000080)='GPL\x00', 0x4, 0xc3, &(0x7f000000cf3d)=""/195, 0x0, 0x0, '\x00', 0x0, @sk_msg, 0xffffffffffffffff, 0x8, &(0x7f0000000000), 0x8, 0x10, &(0x7f0000000000)={0x8000}, 0x10}, 0x94)

2.52857565s ago: executing program 0 (id=1318):
r0 = bpf$PROG_LOAD(0x5, &(0x7f0000000600)={0x20, 0x3, &(0x7f00000002c0)=ANY=[@ANYBLOB="1800000000000000000000000000000095"], &(0x7f0000000000)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @netfilter=0x2d, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x99ee}, 0x94)
bpf$BPF_LINK_CREATE_XDP(0x1c, &(0x7f0000000500)={r0, 0x0, 0x2d, 0x0, @val=@netfilter={0xa, 0x4, 0x600, 0x1}}, 0x20)
socket$nl_route(0x10, 0x3, 0x0)
socket$nl_route(0x10, 0x3, 0x0)
socket$tipc(0x1e, 0x2, 0x0)
socket$nl_netfilter(0x10, 0x3, 0xc)
epoll_create1(0x0)
socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000180))
socket(0x400000000010, 0x3, 0x0)
socket$unix(0x1, 0x1, 0x0)
socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000940))
socket(0x40000000015, 0x805, 0x0)
socket$nl_netfilter(0x10, 0x3, 0xc)
sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000580)={0x0}, 0x1, 0x0, 0x0, 0x40088c1}, 0x0)
r1 = socket(0x10, 0x3, 0x0)
bpf$MAP_CREATE(0x0, &(0x7f0000000100)=@base={0x11, 0x4, 0x4, 0x9}, 0x48)
r2 = socket(0x10, 0x803, 0x0)
sendmsg$nl_route(r2, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000580)={&(0x7f0000000080)=ANY=[@ANYBLOB="540000001400b59500000000000000000a000000", @ANYRES32=r2, @ANYBLOB="140001000040"], 0x54}, 0x1, 0x0, 0x0, 0x800}, 0x80)
sendmmsg(r1, &(0x7f0000000000), 0x4000000000001f2, 0x0)
r3 = socket$inet6_tcp(0xa, 0x1, 0x0)
connect$inet6(r3, &(0x7f0000000140)={0xa, 0x4e22, 0x56202329, @empty, 0x4000005}, 0x1c)

2.15268288s ago: executing program 0 (id=1323):
r0 = socket(0x10, 0x803, 0x0)
r1 = socket$can_raw(0x1d, 0x3, 0x1)
ioctl$sock_SIOCGIFINDEX(0xffffffffffffffff, 0x8933, &(0x7f0000000100)={'batadv_slave_0\x00'})
mmap(&(0x7f0000001000/0xc00000)=nil, 0xc00000, 0x0, 0x3032, 0xffffffffffffffff, 0x0)
r2 = bpf$MAP_CREATE_CONST_STR(0x0, &(0x7f0000000440)={0x2, 0x4, 0x8, 0x1, 0x80, 0xffffffffffffffff, 0x0, '\x00', 0x0, 0x0}, 0x50)
bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, &(0x7f0000000180)={{r2}, &(0x7f00000000c0), &(0x7f0000000100)}, 0x20)
bpf$BPF_MAP_CONST_STR_FREEZE(0x16, &(0x7f0000000300)={r2, <r3=>0xffffffffffffffff}, 0x4)
bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000800)={0x11, 0x10, &(0x7f00000003c0)=@framed={{0x18, 0x0, 0x0, 0x0, 0x40000000}, [@snprintf={{}, {}, {0x7, 0x0, 0xb, 0x8, 0x0, 0x0, 0x40000002}, {}, {}, {}, {}, {}, {}, {0x18, 0x3, 0x2, 0x0, r3}}]}, &(0x7f0000000240)='GPL\x00', 0x4, 0x1009, &(0x7f0000002500)=""/4105, 0x0, 0x68}, 0x94)
r4 = socket$inet6_udp(0xa, 0x2, 0x0)
sendmsg$inet6(r4, &(0x7f0000002880)={&(0x7f0000001f40)={0xa, 0x4e21, 0xffffffff, @ipv4={'\x00', '\xff\xff', @multicast2}, 0x8c2}, 0x1c, 0x0, 0x0, &(0x7f0000002540)=[@hopopts_2292={{0x18, 0x29, 0x36, {0x8}}}, @pktinfo={{0x24, 0x29, 0x32, {@mcast2}}}], 0x40}, 0x40)
getsockopt$CAN_RAW_FD_FRAMES(r1, 0x65, 0x5, 0x0, &(0x7f00000000c0))
r5 = socket$inet6(0xa, 0x1, 0x0)
setsockopt$inet6_IPV6_FLOWLABEL_MGR(r5, 0x29, 0x20, &(0x7f0000000200)={@private0, 0x0, 0x0, 0x1, 0x1}, 0x20)
setsockopt$inet6_IPV6_FLOWLABEL_MGR(r5, 0x29, 0x20, &(0x7f0000000100)={@rand_addr=' \x01\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x02', 0x0, 0x0, 0xff, 0x9}, 0x20)
getsockopt$inet6_IPV6_FLOWLABEL_MGR(r5, 0x29, 0x20, &(0x7f0000000300)={@local, 0x0, 0x0, 0x1}, &(0x7f00000004c0)=0x20)
sendmsg$nl_route(r0, &(0x7f0000000380)={0x0, 0x4076cbba9945d516, &(0x7f0000000340)={0x0, 0x14}}, 0x0)
getsockname$packet(r0, &(0x7f0000000280)={0x11, 0x0, <r6=>0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0x14)
syz_init_net_socket$ax25(0x3, 0x2, 0xcd)
r7 = socket$nl_route(0x10, 0x3, 0x0)
sendmsg$nl_route(r7, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000500)={&(0x7f00000002c0)=@newlink={0x38, 0x10, 0x439, 0x0, 0xfffffffc, {0x0, 0x0, 0x0, r6, 0x9801, 0x802}, [@IFLA_LINKINFO={0x18, 0x12, 0x0, 0x1, @gre={{0x8}, {0xc, 0x2, 0x0, 0x1, [@IFLA_GRE_REMOTE={0x8, 0x7, @dev={0xac, 0x14, 0x14, 0x29}}]}}}]}, 0x38}}, 0x0)
r8 = socket$nl_generic(0x10, 0x3, 0x10)
sendmsg$nl_generic(r8, &(0x7f0000000100)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000001880)={0x24, 0x2e, 0x9, 0x70bd27, 0x0, {0x4}, [@nested={0x10, 0x1a, 0x0, 0x1, [@nested={0xc, 0x4, 0x0, 0x1, [@typed={0x8, 0xcc, 0x0, 0x0, @ipv4=@multicast1}]}]}]}, 0x24}, 0x1, 0x0, 0x0, 0x42804}, 0x84)
sendmsg$nl_route(r7, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000680)=@newlink={0xa4, 0x10, 0x439, 0x2, 0x0, {0x0, 0x0, 0x0, r6, 0x1040, 0x44100}, [@IFLA_LINKINFO={0x30, 0x12, 0x0, 0x1, @gre={{0x8}, {0x24, 0x2, 0x0, 0x1, [@IFLA_GRE_REMOTE={0x8, 0x7, @private=0xa010100}, @IFLA_GRE_OFLAGS={0x6, 0x3, 0x17}, @IFLA_GRE_ENCAP_FLAGS={0x6, 0xf, 0x3}, @IFLA_GRE_ENCAP_SPORT={0x6, 0x10, 0x4e20}]}}}, @IFLA_IFALIAS={0x14, 0x14, 'veth0_to_hsr\x00'}, @IFLA_IFALIAS={0x14, 0x14, 'team0\x00'}, @IFLA_PHYS_PORT_ID={0x4}, @IFLA_IFALIASn={0x4}, @IFLA_MTU={0x8, 0x4, 0x6}, @IFLA_PHYS_SWITCH_ID={0x1c, 0x24, "4a2efc13a954582352ff335733c8f6c051d03a72055613be"}]}, 0xa4}, 0x1, 0x0, 0x0, 0x1}, 0x4004000)
setsockopt$inet6_tcp_TCP_ULP(r5, 0x6, 0x1f, &(0x7f00000001c0), 0x3)
ioctl$sock_TIOCINQ(r0, 0x541b, &(0x7f0000000140))

2.057380849s ago: executing program 2 (id=1324):
r0 = socket$nl_netfilter(0x10, 0x3, 0xc)
sendmsg$NFT_BATCH(r0, 0x0, 0x0)
sendmsg$NFT_BATCH(r0, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000040)={&(0x7f00000000c0)={{0x14}, [@NFT_MSG_NEWRULE={0x50, 0x6, 0xa, 0x40b, 0x0, 0x0, {0x2}, [@NFTA_RULE_EXPRESSIONS={0x24, 0x4, 0x0, 0x1, [{0x20, 0x1, 0x0, 0x1, @ct={{0x7}, @val={0x14, 0x2, 0x0, 0x1, [@NFTA_CT_DREG={0x8, 0x1, 0x1, 0x0, 0x9}, @NFTA_CT_KEY={0x8, 0x2, 0x1, 0x0, 0x8}]}}}]}, @NFTA_RULE_TABLE={0x9, 0x1, 'syz0\x00'}, @NFTA_RULE_CHAIN={0x9, 0x2, 'syz2\x00'}]}], {0x14}}, 0x78}, 0x1, 0x0, 0x0, 0x2008c040}, 0x0) (async)
r1 = socket(0x10, 0x3, 0x0)
r2 = socket$nl_route(0x10, 0x3, 0x0) (async)
r3 = socket(0x10, 0x803, 0x0) (async)
r4 = socket$nl_netfilter(0x10, 0x3, 0xc)
sendmsg$IPCTNL_MSG_CT_GET(r4, &(0x7f0000000200)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f00000006c0)={0x60, 0x1, 0x1, 0x3, 0x0, 0x0, {0xa, 0x0, 0x8}, [@CTA_ZONE={0x6, 0x12, 0x1, 0x0, 0x2}, @CTA_TUPLE_ORIG={0x44, 0x1, 0x0, 0x1, [@CTA_TUPLE_ZONE={0x6, 0x3, 0x1, 0x0, 0x3}, @CTA_TUPLE_IP={0x2c, 0x1, 0x0, 0x1, @ipv6={{0x14, 0x3, @mcast1}, {0x14, 0x4, @empty}}}, @CTA_TUPLE_PROTO={0xc, 0x2, 0x0, 0x1, {0x4, 0x1, 0x88}}]}]}, 0x60}}, 0x4000) (async)
syz_genetlink_get_family_id$mptcp(&(0x7f00000000c0), r3) (async)
getsockname$packet(r3, &(0x7f0000000100)={0x11, 0x0, <r5=>0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0x14)
sendmsg$nl_route(r2, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000440)=ANY=[@ANYBLOB="3c0000001000010400eeffff11feffffff000000", @ANYRES32=r5, @ANYBLOB="01000000010000001c0012000c000100627269646765"], 0x3c}}, 0x40) (async)
r6 = socket$inet6_sctp(0xa, 0x1, 0x84)
shutdown(r6, 0x0) (async)
getsockopt$inet_sctp6_SCTP_SOCKOPT_CONNECTX3(r6, 0x84, 0x6f, &(0x7f0000000000)={<r7=>0x0, 0x1c, &(0x7f0000000200)=[@in6={0xa, 0x4e23, 0x3ff, @rand_addr=' \x01\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x01', 0x1}]}, &(0x7f0000000440)=0x10)
setsockopt$inet_sctp6_SCTP_RTOINFO(r6, 0x84, 0x0, &(0x7f0000000140)={r7, 0xffff0001, 0x0, 0x7}, 0x10) (async)
r8 = syz_genetlink_get_family_id$wireguard(&(0x7f00000002c0), r1)
r9 = socket$netlink(0x10, 0x3, 0x0)
ioctl$sock_SIOCGIFINDEX(r9, 0x8933, &(0x7f00000000c0)={'bridge0\x00', <r10=>0x0})
sendmsg$nl_route(r9, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000bc0)={&(0x7f0000000080)=ANY=[@ANYBLOB="240000001d00070f000200000000000007000000", @ANYRES32=r10, @ANYBLOB='\x00\x00g\x00\b\x00\b\x00', @ANYRES16=r9], 0x24}, 0x1, 0x0, 0x0, 0x4008004}, 0x0)
sendmsg$WG_CMD_SET_DEVICE(r1, &(0x7f0000000480)={&(0x7f0000000240)={0x10, 0x0, 0x0, 0x10000000}, 0xc, &(0x7f0000000400)={&(0x7f0000000380)={0x50, r8, 0x400, 0x70bd25, 0x25dfdbfd, {}, [@WGDEVICE_A_LISTEN_PORT={0x6, 0x6, 0x4e21}, @WGDEVICE_A_FWMARK={0x8, 0x7, 0x1}, @WGDEVICE_A_FLAGS={0x8, 0x5, 0xcb85cfa79c425ecb}, @WGDEVICE_A_IFINDEX={0x8, 0x1, r5}, @WGDEVICE_A_IFNAME={0x14, 0x2, 'wg1\x00'}, @WGDEVICE_A_IFINDEX={0x8, 0x1, r10}]}, 0x50}, 0x1, 0x0, 0x0, 0x4000000}, 0x10) (async)
r11 = socket$nl_generic(0x10, 0x3, 0x10) (async)
r12 = socket(0x10, 0x3, 0x0)
r13 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000180), r11)
ioctl$sock_SIOCGIFINDEX_80211(r12, 0x8933, &(0x7f00000001c0)={'wlan1\x00', <r14=>0x0})
sendmsg$NL80211_CMD_DEL_PMKSA(r11, &(0x7f0000000340)={0x0, 0x0, &(0x7f0000000300)={&(0x7f0000000280)=ANY=[@ANYBLOB='D\x00\x00\x00', @ANYRES16=r13, @ANYBLOB="010026bd7000fddbdf253500000008000300", @ANYRES32=r14, @ANYBLOB="1400fe17d76dbfb0c3a0843d45cb38ecb3381c9a0600fd00ff0f00000a003400"], 0x44}, 0x1, 0x0, 0x0, 0x40004}, 0x20000000)
r15 = socket$nl_route(0x10, 0x3, 0x0)
sendmsg$nl_route(r15, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000500)={&(0x7f00000000c0)=@newlink={0x38, 0x10, 0x439, 0x0, 0x0, {0x0, 0x0, 0x0, 0x0, 0x9801}, [@IFLA_LINKINFO={0x18, 0x12, 0x0, 0x1, @gre={{0x8}, {0xc, 0x2, 0x0, 0x1, [@IFLA_GRE_REMOTE={0x8, 0x7, @multicast2}]}}}]}, 0x38}}, 0x0) (async)
sendmsg$nl_route_sched(r1, &(0x7f0000005840)={0x0, 0x0, &(0x7f00000005c0)={&(0x7f0000001240)=@newqdisc={0x78, 0x24, 0x5820a61ca228651, 0x0, 0x0, {0x0, 0x0, 0x0, r5, {}, {0xffff, 0xffff}}, [@qdisc_kind_options=@q_sfq={{0x8}, {0x4c, 0x2, {{}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1a}}}]}, 0x78}, 0x1, 0x0, 0x0, 0x4040004}, 0x0) (async)
sendmsg$nl_route_sched(r1, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000180)={&(0x7f00000012c0)=@newtfilter={0x44, 0x2c, 0xd27, 0x0, 0x0, {0x0, 0x0, 0x0, r5, {}, {}, {0xd}}, [@filter_kind_options=@f_flower={{0xb}, {0x14, 0x2, [@TCA_FLOWER_KEY_IPV4_SRC_MASK={0x8, 0xb, 0xffffff00}, @TCA_FLOWER_KEY_IPV4_SRC={0x8, 0xa, @local}]}}]}, 0x44}}, 0x0)

1.926007246s ago: executing program 2 (id=1326):
r0 = socket$kcm(0x29, 0x2, 0x0)
sendmsg$inet(r0, &(0x7f0000000680)={0x0, 0x0, &(0x7f0000000440)=[{&(0x7f0000000380)="ad", 0x1}], 0x1}, 0x800)
r1 = socket$inet6_tcp(0xa, 0x1, 0x0)
mmap(&(0x7f0000000000/0x2000)=nil, 0x2000, 0x1000001, 0x32, 0xffffffffffffffff, 0x0) (async)
mmap(&(0x7f0000000000/0x2000)=nil, 0x2000, 0x1000001, 0x32, 0xffffffffffffffff, 0x0)
setsockopt$inet6_tcp_TCP_ULP(r1, 0x6, 0x1f, &(0x7f00000000c0), 0x4)
setsockopt$inet6_int(r1, 0x29, 0x1a, 0x0, 0x7)
r2 = bpf$PROG_LOAD(0x5, &(0x7f0000000080)={0x1, 0x5, &(0x7f0000001000)=ANY=[@ANYBLOB="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"], &(0x7f0000000140)='GPL\x00'}, 0x48)
r3 = socket$kcm(0x2, 0x1, 0x0)
sendmsg$inet(r3, &(0x7f0000000fc0)={&(0x7f0000000000)={0x2, 0x4001, @remote}, 0x10, 0x0}, 0x20000811)
socket$can_raw(0x1d, 0x3, 0x1) (async)
r4 = socket$can_raw(0x1d, 0x3, 0x1)
setsockopt$CAN_RAW_ERR_FILTER(r4, 0x65, 0x7, &(0x7f00000001c0)=0x8, 0x4) (async)
setsockopt$CAN_RAW_ERR_FILTER(r4, 0x65, 0x7, &(0x7f00000001c0)=0x8, 0x4)
ioctl$sock_SIOCGIFINDEX(r4, 0x8933, &(0x7f0000000080)={'vxcan1\x00', <r5=>0x0})
socket$nl_netfilter(0x10, 0x3, 0xc) (async)
r6 = socket$nl_netfilter(0x10, 0x3, 0xc)
sendmsg$NFT_BATCH(r6, &(0x7f0000000380)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000040)={{0x14}, [@NFT_MSG_NEWTABLE={0x20, 0x0, 0xa, 0x201, 0x0, 0x0, {0x1}, [@NFTA_TABLE_NAME={0x9, 0x1, 'syz0\x00'}]}, @NFT_MSG_NEWFLOWTABLE={0x94, 0x16, 0xa, 0x1, 0x0, 0x0, {0x1}, [@NFTA_FLOWTABLE_TABLE={0x9, 0x1, 'syz0\x00'}, @NFTA_FLOWTABLE_NAME={0x9, 0x2, 'syz1\x00'}, @NFTA_FLOWTABLE_HOOK={0x68, 0x3, 0x0, 0x1, [@NFTA_FLOWTABLE_HOOK_NUM={0x8}, @NFTA_FLOWTABLE_HOOK_PRIORITY={0x8, 0x2, 0x1, 0x0, 0x4}, @NFTA_FLOWTABLE_HOOK_DEVS={0x54, 0x3, 0x0, 0x1, [{0x14, 0x1, 'vlan0\x00'}, {0x14, 0x1, 'wlan0\x00'}, {0x14, 0x1, 'pim6reg1\x00'}, {0x14, 0x1, 'vxcan1\x00'}]}]}]}, @NFT_MSG_DELFLOWTABLE={0x48, 0x16, 0xa, 0x101, 0xb00, 0x0, {0x1}, [@NFTA_FLOWTABLE_NAME={0x9, 0x2, 'syz1\x00'}, @NFTA_FLOWTABLE_TABLE={0x9, 0x1, 'syz0\x00'}, @NFTA_FLOWTABLE_HOOK={0x1c, 0x3, 0x0, 0x1, [@NFTA_FLOWTABLE_HOOK_DEVS={0x18, 0x3, 0x0, 0x1, [{0x14, 0x1, 'pim6reg1\x00'}]}]}]}], {0x14, 0x10}}, 0x124}, 0x1, 0x0, 0x0, 0x40000}, 0x0) (async)
sendmsg$NFT_BATCH(r6, &(0x7f0000000380)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000040)={{0x14}, [@NFT_MSG_NEWTABLE={0x20, 0x0, 0xa, 0x201, 0x0, 0x0, {0x1}, [@NFTA_TABLE_NAME={0x9, 0x1, 'syz0\x00'}]}, @NFT_MSG_NEWFLOWTABLE={0x94, 0x16, 0xa, 0x1, 0x0, 0x0, {0x1}, [@NFTA_FLOWTABLE_TABLE={0x9, 0x1, 'syz0\x00'}, @NFTA_FLOWTABLE_NAME={0x9, 0x2, 'syz1\x00'}, @NFTA_FLOWTABLE_HOOK={0x68, 0x3, 0x0, 0x1, [@NFTA_FLOWTABLE_HOOK_NUM={0x8}, @NFTA_FLOWTABLE_HOOK_PRIORITY={0x8, 0x2, 0x1, 0x0, 0x4}, @NFTA_FLOWTABLE_HOOK_DEVS={0x54, 0x3, 0x0, 0x1, [{0x14, 0x1, 'vlan0\x00'}, {0x14, 0x1, 'wlan0\x00'}, {0x14, 0x1, 'pim6reg1\x00'}, {0x14, 0x1, 'vxcan1\x00'}]}]}]}, @NFT_MSG_DELFLOWTABLE={0x48, 0x16, 0xa, 0x101, 0xb00, 0x0, {0x1}, [@NFTA_FLOWTABLE_NAME={0x9, 0x2, 'syz1\x00'}, @NFTA_FLOWTABLE_TABLE={0x9, 0x1, 'syz0\x00'}, @NFTA_FLOWTABLE_HOOK={0x1c, 0x3, 0x0, 0x1, [@NFTA_FLOWTABLE_HOOK_DEVS={0x18, 0x3, 0x0, 0x1, [{0x14, 0x1, 'pim6reg1\x00'}]}]}]}], {0x14, 0x10}}, 0x124}, 0x1, 0x0, 0x0, 0x40000}, 0x0)
sendmsg$can_raw(r4, &(0x7f0000000140)={&(0x7f0000000000)={0x1d, r5}, 0x10, &(0x7f00000005c0)={&(0x7f0000000100)=@can={{}, 0x80, 0x3, 0x4, 0x2, "07000000008000"}, 0x210}}, 0x0)
ioctl$sock_kcm_SIOCKCMATTACH(r0, 0x89e0, &(0x7f0000000040)={r3, r2})

1.821844536s ago: executing program 3 (id=1328):
r0 = bpf$MAP_CREATE(0x0, &(0x7f00000000c0)=@base={0x1b, 0x0, 0x0, 0x8000}, 0x48)
r1 = bpf$MAP_CREATE(0x0, &(0x7f00000001c0)=@base={0x8, 0x4, 0x4, 0x2, 0x0, 0x1, 0xfffffffc}, 0x50)
bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x6, 0x15, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000010000000000000000000018110000", @ANYRES32=r0, @ANYBLOB="0000000000000000b7080000860000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000002100850000008200000018110000", @ANYRES32=r1, @ANYBLOB="00000000fffffff8b7080000000000007b8af8ff00000000bca2000000000000a6020000f8ffffffb703000008000000b704000000000000850000003300000095"], &(0x7f0000000180)='GPL\x00', 0x0, 0x0, 0x0, 0x41000, 0x0, '\x00', 0x0, @fallback=0x38, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94)

1.736480506s ago: executing program 0 (id=1329):
r0 = openat$tun(0xffffffffffffff9c, &(0x7f00000001c0), 0x42000, 0x0)
ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f0000000000)={'pim6reg1\x00', 0x2}) (async)
ioctl$TUNSETLINK(r0, 0x400454cd, 0x339)
socketpair$nbd(0x1, 0x1, 0x0, &(0x7f0000000040)={0xffffffffffffffff, <r1=>0xffffffffffffffff}) (async)
r2 = syz_init_net_socket$rose(0xb, 0x5, 0x0)
ioctl$SIOCRSSCAUSE(r2, 0x891d, 0x0) (async)
r3 = socket$inet6_sctp(0xa, 0x5, 0x84)
setsockopt$sock_int(r3, 0x1, 0x4, &(0x7f0000000180)=0x100400b0, 0x4) (async)
ioctl$SIOCSIFHWADDR(r1, 0x8914, &(0x7f0000000140)={'pim6reg1\x00', @multicast})
close(r0)
ioctl$EXT4_IOC_ALLOC_DA_BLKS(0xffffffffffffffff, 0x660c)

1.654333833s ago: executing program 3 (id=1330):
socket$nl_route(0x10, 0x3, 0x0)
r0 = bpf$MAP_CREATE(0x0, &(0x7f00000002c0)=ANY=[@ANYBLOB="1b00000000000000000000000080"], 0x48)
r1 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000340)={0x1f, 0x15, &(0x7f0000000580)=ANY=[@ANYBLOB="18000000fcffffff000000008000000018010000", @ANYRES32=r0, @ANYBLOB="0000000000000000b7080000020000207b8ae8ff00000000bfa200000000000007020000f8ffffffb703000008000000b70400000200000085000000a600000018110000", @ANYRES32=r0, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000002000000850000008200000095"], &(0x7f0000000000)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x11}, 0x94)
bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000500)={r1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x48)

1.553989925s ago: executing program 4 (id=1331):
sendmsg$NL802154_CMD_NEW_INTERFACE(0xffffffffffffffff, &(0x7f0000000100)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000040)={0x3c, 0x0, 0x1, 0x70bd2a, 0x25dfdbfc, {}, [@NL802154_ATTR_WPAN_PHY={0x8, 0x1, 0x1}, @NL802154_ATTR_IFTYPE={0x8, 0x5, 0x2}, @NL802154_ATTR_IFNAME={0xa, 0x4, 'wpan3\x00'}, @NL802154_ATTR_EXTENDED_ADDR={0xc, 0x17, {0xaaaaaaaaaaaa0102}}]}, 0x3c}, 0x1, 0x0, 0x0, 0x80}, 0x40000) (async)
r0 = socket$kcm(0x10, 0x2, 0x10) (async)
sendmsg$NFT_BATCH(0xffffffffffffffff, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000040)={&(0x7f00000001c0)=ANY=[@ANYBLOB="140000001000010000000000000000000000000a20000000000a03000000000000000000070000040900010073797a30000000009c000000090a010400000000000000000700000308000a40000000000900020073797a30000000000900010073797a3000000000080005400000000d58001280200001800e000100636f6e6e6c696d69740000000c0002800800014000000008200001800e000100636f6e6e6c696d69740000000c00028008000140000000001400017b090001006cdbf80789f3f947dd000280080003"], 0xe4}, 0x1, 0x0, 0x0, 0x8001}, 0x20050840) (async, rerun: 32)
r1 = socket$nl_netfilter(0x10, 0x3, 0xc) (async, rerun: 32)
r2 = socket$igmp(0x2, 0x3, 0x2)
setsockopt$inet_IP_XFRM_POLICY(r2, 0x0, 0x11, &(0x7f00000002c0)={{{@in6=@remote, @in=@loopback, 0x4e21, 0x0, 0x4e20, 0x0, 0xa, 0x80, 0x60, 0x11}, {0x9, 0x9642, 0x1, 0x401, 0x8, 0x1000, 0x6, 0xfffffffffffffffb}, {0x1, 0x500000000, 0x3, 0x5}, 0xfff, 0x0, 0x2, 0x1}, {{@in=@initdev={0xac, 0x1e, 0x0, 0x0}, 0x4d3, 0x3c}, 0x2, @in=@local, 0x0, 0x1, 0x3, 0x1, 0x3, 0x2}}, 0xe8) (async)
sendmsg$IPCTNL_MSG_EXP_DELETE(r1, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000100)={&(0x7f0000000040)={0x50, 0x2, 0x2, 0x401, 0x0, 0x0, {0xa}, [@CTA_EXPECT_TUPLE={0x3c, 0x2, 0x0, 0x1, [@CTA_TUPLE_PROTO={0xc, 0x2, 0x0, 0x1, {0x5}}, @CTA_TUPLE_IP={0x2c, 0x1, 0x0, 0x1, @ipv6={{0x14, 0x3, @dev}, {0x14, 0x4, @loopback}}}]}]}, 0x50}}, 0x0) (async, rerun: 32)
r3 = openat$tun(0xffffffffffffff9c, &(0x7f00000002c0), 0x8e40, 0x0) (rerun: 32)
close(r3)
ioctl$SIOCSIFHWADDR(r3, 0x8914, &(0x7f0000002280)={'syzkaller0\x00', @multicast})
ioctl$SIOCSIFHWADDR(r3, 0x8924, &(0x7f0000000180)={'veth0_to_team\x00', @broadcast})
sendmsg$kcm(r0, &(0x7f0000000000)={0x0, 0xd18c9b25, &(0x7f0000000080)=[{&(0x7f0000000040)="e03f030041000b05d25a806c8c6394f90324fc60100000000a000200053582c137153e3704020180fc5409000c00", 0x33fe0}], 0x1}, 0x0)
syz_init_net_socket$rose(0xb, 0x5, 0x0)

1.452738782s ago: executing program 3 (id=1332):
ioctl$TUNSETIFF(0xffffffffffffffff, 0x400454ca, &(0x7f0000000200)={'syzkaller1\x00', 0xc201})
r0 = socket$kcm(0x2, 0xa, 0x2)
unshare(0x22020400)
mkdirat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000)='./cgroup/syz1\x00', 0x1ff)
r1 = openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000), 0x200002, 0x0)
r2 = openat$cgroup_type(r1, &(0x7f0000000100), 0x2, 0x0)
pread64(r2, &(0x7f00000008c0)=""/233, 0xe9, 0x2)
ioctl$SIOCSIFHWADDR(r0, 0x8914, &(0x7f0000000180)={'syzkaller1\x00', @link_local})
write$tun(0xffffffffffffffff, &(0x7f0000000280)={@val={0x6f01, 0x800}, @val={0x1, 0x0, 0x27, 0x0, 0x27}, @mpls={[], @ipv4=@tcp={{0x6, 0x4, 0x0, 0x0, 0x3f, 0x0, 0x0, 0x0, 0x84, 0x0, @empty=0x3fffff20, @local}, {{0x0, 0x0, 0x41424344, 0x41424344, 0x0, 0x5, 0xb, 0x0, 0x700, 0x0, 0x18, {[@window={0x9, 0xfffffffffffffec4}, @timestamp={0x5, 0x2}, @generic={0x0, 0x2, "d58838000391"}]}}}}}}, 0xfd6c)
socket$inet6_tcp(0xa, 0x1, 0x0)

1.374300858s ago: executing program 2 (id=1333):
r0 = socket$nl_netfilter(0x10, 0x3, 0xc)
r1 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x6, 0x4, &(0x7f0000000200)=@framed={{0x18, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffb}, [@call={0x85, 0x0, 0x0, 0x50}]}, &(0x7f00000001c0)='syzkaller\x00', 0x0, 0x0, 0x0, 0x41103, 0x0, '\x00', 0x0, @xdp, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffff}, 0x94)
socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000140)={0xffffffffffffffff, <r2=>0xffffffffffffffff})
ioctl$sock_SIOCETHTOOL(r2, 0x89f6, &(0x7f0000000080)={'bridge0\x00', &(0x7f0000000000)=@ethtool_regs={0x4, 0x0, 0xb, "2a16561edfd2f20ab3ed4a"}})
bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000b80)={r1, 0x2000012, 0xe, 0x0, &(0x7f0000000280)="63ec33c9e9b98600000000000000", 0x0, 0x2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, 0x0, 0xb}, 0x50)
socket(0x10, 0x3, 0x0)
socket$packet(0x11, 0x3, 0x300)
r3 = socket(0x10, 0x3, 0x0)
bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000300)={0xe, 0x2, &(0x7f0000000100)=ANY=[@ANYBLOB="91106a000000000095"], &(0x7f0000000280)='GPL\x00'}, 0x94)
setsockopt$netlink_NETLINK_TX_RING(r3, 0x10e, 0xc, &(0x7f0000000280)={0x29e9c934, 0x5, 0x0, 0x4}, 0x10)
sendmsg$nl_generic(r3, &(0x7f0000000040)={0x0, 0x15, &(0x7f0000000140)={&(0x7f00000010c0)=ANY=[@ANYBLOB="200000001600010800000000000000000a0000000c0000800800", @ANYRES16=r3], 0x20}, 0x1, 0x0, 0x0, 0x240c0811}, 0x0)
sendmsg$NFNL_MSG_CTHELPER_DEL(r0, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000000)=ANY=[@ANYBLOB="2c0000000209050000d4ef2be511610a5069f700000000000000000000011800020041c7d6e88a7819216cd9"], 0x2c}, 0x1, 0x0, 0x0, 0x1}, 0x20010000)

1.297742547s ago: executing program 4 (id=1334):
r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000000), 0x40241, 0x0)
ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f0000000200)={'syzkaller1\x00', 0xc201}) (async)
r1 = socket$kcm(0x2, 0xa, 0x2)
ioctl$SIOCSIFHWADDR(r1, 0x8914, &(0x7f0000000180)={'vcan0\x00', @link_local}) (async)
write$tun(r0, &(0x7f0000000240)=ANY=[@ANYBLOB="034886dd010000000000140000006000000000082f00fe88a43de1a400000000000000027d01ff020000000000000000000000000001000088be"], 0xfdef)

1.241892534s ago: executing program 0 (id=1335):
socket$packet(0x11, 0x2, 0x300)
socket$netlink(0x10, 0x3, 0x8)
r0 = socket$nl_generic(0x10, 0x3, 0x10)
r1 = bpf$ITER_CREATE(0xb, &(0x7f0000000100), 0x0)
r2 = socket$isdn_base(0x22, 0x3, 0x0)
close(r2)
r3 = socket$kcm(0x29, 0x5, 0x0)
r4 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000140)='blkio.bfq.io_service_time_recursive\x00', 0x275a, 0x0)
write$cgroup_int(r4, &(0x7f0000000000), 0xffffff6a)
r5 = socket$kcm(0x29, 0x5, 0x0)
sendmsg$kcm(r5, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000ac0)=[{&(0x7f0000000b00)="b6bd7e4983a45b31f79d80060400000000000000a33734d88229acf96457ad59d0b87f8659b614043e3d21a7cacecab8bbd26251b93b28b4d83e618673f9c74d0a28a5146c5511549fa617e908352c87d8ddff2ce042a1e58eb7b63759cab3526dd8ae1566ddcfb5fa83", 0x6a}, {&(0x7f0000000880)="3aa854", 0x3}, {&(0x7f0000000a40)="746b9120a32aaf78043a9b07000000000000003c44", 0x15}], 0x3}, 0xc854)
setsockopt$sock_int(r5, 0x1, 0x12, &(0x7f0000000180)=0x4c, 0x4)
r6 = socket$nl_route(0x10, 0x3, 0x0)
sendmsg$nl_route(r6, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000040)=ANY=[@ANYBLOB="1cbd7000fddbdf250a100000800000000e0001003cb671f27e7b45d5e5fdf0cc746c1193a417b804e3c9e71835c4f773014ca0f67a5d1541593729c33b"], 0x1c}, 0x1, 0x0, 0x0, 0xc1}, 0x0)
r7 = syz_genetlink_get_family_id$nl80211(&(0x7f00000000c0), r1)
sendfile(r3, r4, 0x0, 0xffffffff000)
r8 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000080), 0xffffffffffffffff)
sendmsg$NL80211_CMD_GET_PROTOCOL_FEATURES(r4, &(0x7f0000000240)={&(0x7f0000000180)={0x10, 0x0, 0x0, 0x400}, 0xc, &(0x7f0000000200)={&(0x7f00000001c0)={0x14, r7, 0x0, 0x70bd2c, 0x25dfdbfd, {}, ["", "", "", "", "", "", "", "", ""]}, 0x14}, 0x1, 0x0, 0x0, 0x44010}, 0x40000)
sendmsg$NL80211_CMD_RELOAD_REGDB(r0, &(0x7f00000006c0)={0x0, 0x0, &(0x7f0000000440)={&(0x7f0000000340)={0x14, r8, 0x1, 0x70bd2d, 0x25dfdbfe}, 0x14}, 0x1, 0x0, 0x0, 0x20000000}, 0x20008004)
r9 = socket$inet_tcp(0x2, 0x1, 0x0)
bind$inet(r9, &(0x7f0000000000)={0x2, 0x4e21, @broadcast}, 0x2f)
connect$inet(r9, &(0x7f0000000180)={0x2, 0x4e21, @dev={0xac, 0x14, 0x14, 0x1b}}, 0x10)
sendto$inet(r9, &(0x7f0000000000), 0xffffffffffffff94, 0x0, 0x0, 0x0)
setsockopt$inet_tcp_TCP_CONGESTION(r9, 0x6, 0xd, &(0x7f00000000c0)='bbr', 0x3)
recvfrom$inet(r9, &(0x7f0000000080)=""/8, 0xfffffffffffffd0b, 0x720, 0x0, 0xfffffffffffffd25)
ioctl$AUTOFS_IOC_CATATONIC(r0, 0x9362, 0x0)
ioctl$sock_SIOCGIFINDEX_80211(0xffffffffffffffff, 0x8933, 0x0)
socket$inet_sctp(0x2, 0x1, 0x84)
sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000300)={0x0, 0x0, &(0x7f0000000080)={0x0, 0x48}, 0x1, 0x0, 0x0, 0x10}, 0x4000000)
sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000001980)={&(0x7f0000009b80)=@newchain={0x24, 0x64, 0x300, 0x70bd25, 0x25dfdbfe, {0x0, 0x0, 0x0, 0x0, {0x7, 0xfff2}, {0xf}, {0xa, 0x1ffe4}}}, 0x24}, 0x1, 0x0, 0x0, 0x40}, 0x0)

1.002533291s ago: executing program 2 (id=1336):
socket$unix(0x1, 0x1, 0x0)
openat$tun(0xffffffffffffff9c, &(0x7f0000000240), 0x0, 0x0)
socket$kcm(0x11, 0x3, 0x0)
r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000400), 0x0, 0x0)
close(r0)
r1 = socket$nl_route(0x10, 0x3, 0x0)
openat$tun(0xffffffffffffff9c, &(0x7f0000000280), 0x0, 0x0)
socket(0x28, 0x5, 0x0)
socket$inet6_tcp(0xa, 0x1, 0x0)
sendmsg$inet(0xffffffffffffffff, &(0x7f0000001580)={0x0, 0x0, &(0x7f0000001400)=[{&(0x7f0000000080)="3bfdd75fa5717852d59a9367444a2130e72cd4dabc8854532cca0c32a5b9f844a4610c7525650ce3d3b76b15026d93e6dee896115e9364066aa3d14e33ef732b4681335c576902153114bdb9c74b538a71115fb1d1a63d1b04129661b29aab89d0be999a6b7c9bea755adedbf305a79f70b71d3d4c98577b49db4963ce89b0def5e840f459659cb6f86d56b069a5de11d601d348ff88ca6e5e2cfe40176880b33e9e8dbc32ba2e6a99b1b50276dc4f06166000d7069a3cc76f", 0xb9}, {&(0x7f0000000180)="892950e2405ee8629d9384a91c16d1706a3e61f305119f95cac0f1927f4c205b971eb41147cb1f86883d6910e68ac3996551800b3ec64b77f8444b18345a2c8b178eeeba0cde7319a5a46bfe7f5770e019efd9d52069edcced33a758c4e657f3a792dc193a1911b4e82ea800ad7afe03c851a8", 0x73}, {&(0x7f0000000200)="a68cde0d56b170df7710b54f17d9a39c4f98f3547190", 0x20000216}, {&(0x7f0000000240)="45e04400f2b383517a08c397dd0a76e67ecfc8e74573c24dedd3a48fb62418c1412fdcd15e888cb0f5d02e77bfecefda6b064c0bb2b66a9a522e63873dde02330510255eec7dfa1af708cdab59fb71eca786a359a2c3b0cbad35144ec5b069c53f90e43339845dc7fd140c55b0149ab38eb27c140f374bcc2c95b0b121d1a9302f3a01b888243b3fc0d46f0de0", 0x8d}, {&(0x7f0000000300)="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", 0xcb3}], 0x5, &(0x7f0000001480)=[@ip_pktinfo={{0x1c, 0x0, 0x8, {0x0, @private, @multicast1}}}], 0x20}, 0x0)
pselect6(0x40, &(0x7f00000001c0)={0x0, 0x0, 0x3, 0xfffffffffffffffd}, 0x0, &(0x7f00000002c0)={0x3ff, 0x0, 0x0, 0x9, 0x0, 0x0, 0x7fffffff}, 0x0, 0x0)
close(0x3)
sendmsg$nl_route_sched(r1, &(0x7f00000003c0)={0x0, 0x0, &(0x7f0000000300)={&(0x7f0000000140)=@newqdisc={0x34, 0x24, 0x4ee4e6a52ff56541, 0x70b922, 0x25dfdc01, {0x0, 0x0, 0x0, 0x0, {0x0, 0xd}, {0xffff, 0xb}, {0x4, 0xffe0}}, [@qdisc_kind_options=@q_cake={{0x9}, {0x4}}]}, 0x34}, 0x1, 0x0, 0x0, 0x240040a1}, 0x4890)
ioctl$SIOCSIFHWADDR(r0, 0x8914, &(0x7f0000002280)={'syzkaller0\x00', @multicast})

992.489437ms ago: executing program 3 (id=1337):
r0 = syz_init_net_socket$bt_l2cap(0x1f, 0x2, 0x0)
bind$bt_l2cap(r0, &(0x7f0000000040)={0x1f, 0x0, @none, 0x0, 0x1}, 0xe)
setsockopt$bt_BT_DEFER_SETUP(r0, 0x112, 0xf, &(0x7f0000000080), 0x4)

797.950082ms ago: executing program 3 (id=1338):
r0 = socket$nl_route(0x10, 0x3, 0x0)
socketpair$nbd(0x1, 0x1, 0x0, &(0x7f00000002c0)={0xffffffffffffffff, <r1=>0xffffffffffffffff})
r2 = socket$key(0xf, 0x3, 0x2)
sendmsg$key(r2, &(0x7f0000000380)={0x3, 0x0, &(0x7f0000000340)={&(0x7f0000000500)=ANY=[@ANYBLOB="02010013be402df43ad6fa82c5f5f1b44b030c0000002dbd7000ffdbdf25050006003c0000000a004e2300000005ff010000000000000000000000dfff000044a2000010000005000500ff0000000a004e0b230000f53c00"/98], 0x60}, 0x1, 0x7}, 0x0)
r3 = openat$tun(0xffffffffffffff9c, &(0x7f0000000000), 0x48241, 0x0)
sendmsg$NL80211_CMD_SET_TID_CONFIG(0xffffffffffffffff, 0x0, 0x4) (async)
sendmsg$NL80211_CMD_SET_TID_CONFIG(0xffffffffffffffff, 0x0, 0x4)
ioctl$XFS_IOC_FD_TO_HANDLE(r1, 0xc038586a, &(0x7f00000003c0)={<r4=>r2, &(0x7f0000000040)='\xbb\xbb\xbb\xbb\xbb\xbb', 0x0, &(0x7f0000000140)={@_ha_fsid={[0x2, 0x6]}, {0x6, 0x7, 0x3, 0xd6}}, 0x8, &(0x7f00000001c0), &(0x7f0000000200)=0xffffffff})
socket$nl_generic(0x10, 0x3, 0x10) (async)
r5 = socket$nl_generic(0x10, 0x3, 0x10)
r6 = syz_genetlink_get_family_id$tipc(&(0x7f00000000c0), r5)
sendmsg$TIPC_CMD_ENABLE_BEARER(r5, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000300)={&(0x7f0000000680)=ANY=[@ANYBLOB='8\x00\x00\x00', @ANYRES16=r6, @ANYBLOB="010000000d0000000000010000000000000001410000001c001700000000000000006574683a73797a6b616c6c657230"], 0x38}, 0x1, 0x0, 0x0, 0x44081}, 0x0)
sendmsg$TIPC_CMD_GET_MEDIA_NAMES(r4, &(0x7f00000004c0)={&(0x7f0000000400)={0x10, 0x0, 0x0, 0x80000000}, 0xc, &(0x7f0000000480)={&(0x7f0000000440)={0x1c, r6, 0x400, 0x70bd27, 0x25dfdbfd, {}, ["", "", "", "", ""]}, 0x1c}, 0x1, 0x0, 0x0, 0x804}, 0x20000000) (async)
sendmsg$TIPC_CMD_GET_MEDIA_NAMES(r4, &(0x7f00000004c0)={&(0x7f0000000400)={0x10, 0x0, 0x0, 0x80000000}, 0xc, &(0x7f0000000480)={&(0x7f0000000440)={0x1c, r6, 0x400, 0x70bd27, 0x25dfdbfd, {}, ["", "", "", "", ""]}, 0x1c}, 0x1, 0x0, 0x0, 0x804}, 0x20000000)
socket$packet(0x11, 0x3, 0x300) (async)
r7 = socket$packet(0x11, 0x3, 0x300)
setsockopt$SO_ATTACH_FILTER(r7, 0x1, 0x1a, &(0x7f0000002280)={0x3, &(0x7f0000000180)=[{0x20, 0x2, 0x81, 0xfffff034}, {0x20, 0x0, 0x8, 0xfbfff010}, {0x6, 0xf4, 0x2, 0xffff}]}, 0x10)
ioctl$TUNSETIFF(r3, 0x400454ca, &(0x7f00000000c0)={'syzkaller1\x00', 0x6bf1c2d5adba8c32})
socket$kcm(0x2, 0xa, 0x2) (async)
r8 = socket$kcm(0x2, 0xa, 0x2)
ioctl$SIOCSIFHWADDR(r8, 0x8914, &(0x7f0000000180)={'syzkaller1\x00', @link_local={0x1, 0x80, 0xc2, 0x0, 0x0, 0xe}})
write$tun(r3, &(0x7f0000000300)={@void, @void, @eth={@multicast, @multicast, @val={@val={0x88a8, 0x5, 0x1, 0x4}, {0x8100, 0x6, 0x0, 0x6}}, {@ipv6={0x86dd, @tipc_packet={0xb, 0x6, "5afbeb", 0x1a, 0x6, 0xff, @mcast2, @private2, {[], @payload_conn={{{0x1a, 0x0, 0x1, 0x0, 0x0, 0x6, 0x1, 0x2, 0x7, 0x0, 0x0, 0xf, 0x3, 0x0, 0x3, 0x4, 0x3, 0x4e22, 0x4e21}}, [0x0, 0x0]}}}}}}}, 0x45)
ioctl$SIOCSIFHWADDR(r1, 0x8923, &(0x7f00000000c0)={'dummy0\x00'})
sendmsg$nl_route(r0, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000280)=ANY=[@ANYBLOB="3c000104fcfffffffcdbdf2500004d0000000000", @ANYRES32=0x0, @ANYBLOB="03150000640e03001c0012800b0001006970766c616e00000c0002800600020003000000"], 0x3c}, 0x1, 0x0, 0x0, 0x24004801}, 0x20044024) (async)
sendmsg$nl_route(r0, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000280)=ANY=[@ANYBLOB="3c000104fcfffffffcdbdf2500004d0000000000", @ANYRES32=0x0, @ANYBLOB="03150000640e03001c0012800b0001006970766c616e00000c0002800600020003000000"], 0x3c}, 0x1, 0x0, 0x0, 0x24004801}, 0x20044024)

780.825584ms ago: executing program 4 (id=1339):
unshare(0x400) (async)
mkdirat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000)='./cgroup.net/syz0\x00', 0x1ff)
r0 = openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000), 0x200002, 0x0)
sendfile(0xffffffffffffffff, r0, 0x0, 0x38c6) (async)
r1 = socket$nl_route(0x10, 0x3, 0x0)
ioctl$sock_SIOCGIFINDEX(r1, 0x8933, &(0x7f0000000000)={'bond0\x00', <r2=>0x0})
sendmsg$nl_route(r1, &(0x7f0000000440)={0x0, 0x0, &(0x7f0000000580)={&(0x7f0000000140)=@newlink={0x28, 0x10, 0x403, 0x0, 0x0, {0x0, 0x0, 0x4, r2, 0x1bc60, 0x1a704}, [@IFLA_PROTO_DOWN={0x5, 0x27, 0x9}]}, 0x28}, 0x1, 0x0, 0x0, 0x11}, 0x7ab2ad051e53e211)
openat$ppp(0xffffffffffffff9c, &(0x7f0000000000), 0xc0802, 0x0) (async)
r3 = bpf$MAP_CREATE_CONST_STR(0x0, &(0x7f0000000340)={0x2, 0x4, 0x8, 0x1, 0x80, 0xffffffffffffffff, 0x4}, 0x50)
r4 = bpf$PROG_LOAD(0x5, &(0x7f0000000100)={0x1f, 0x11, &(0x7f00000007c0)=ANY=[@ANYBLOB="1800000000000000000000000000000085000000a8000000b7080000000000007b8af8ff00000000b7080000000000007b8af0ff00000000bfa100000000000007010000f8ffffffbfa400000000000007040000f0ffffffb70200000800000018230000", @ANYRES32=r3, @ANYBLOB="0000000000000000b70500000800000085000000a700000095"], &(0x7f0000000b00)='GPL\x00', 0x0, 0x0, 0x0, 0x40f00, 0x1a, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94)
bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000340)={r4, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x48)
bpf$PROG_BIND_MAP(0xa, &(0x7f0000000500)={r4, r3}, 0xc) (async)
r5 = socket$phonet(0x23, 0x2, 0x1)
r6 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10)
r7 = syz_genetlink_get_family_id$nfc(&(0x7f0000000100), r6)
sendmsg$NFC_CMD_DEV_UP(r6, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000180)={&(0x7f00000001c0)={0x14, r7, 0x1, 0x123, 0x234}, 0x14}}, 0x0) (async)
r8 = socket(0x2a, 0x1, 0x8000044)
ioctl$sock_SIOCGIFINDEX(r8, 0x61d0, 0x0) (async)
syz_genetlink_get_family_id$ethtool(&(0x7f0000000280), r8)
sendmsg$IPCTNL_MSG_TIMEOUT_DEFAULT_GET(r8, &(0x7f00000003c0)={0x0, 0xfffffffffffffe69, &(0x7f00000000c0)={&(0x7f0000000080)=ANY=[@ANYRES32=r8], 0x1c}, 0x1, 0x0, 0x0, 0x20040024}, 0x8040) (async)
accept4$inet6(r8, &(0x7f0000000200)={0xa, 0x0, 0x0, @private1}, &(0x7f0000000240)=0x1c, 0x80000) (async)
recvfrom$phonet(r8, &(0x7f0000000040)=""/118, 0x76, 0x1, &(0x7f0000000100)={0x23, 0xf7, 0x1d, 0x8}, 0x10)
bpf$PROG_LOAD(0x5, &(0x7f0000001c40)={0x14, 0x10, &(0x7f0000000180)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32, @ANYBLOB="0000000000000000b702000001000000850000000500000018110000", @ANYRES32, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffff"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x45, '\x00', 0x0, @fallback=0x2f, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94)
r9 = socket$netlink(0x10, 0x3, 0x0) (async)
r10 = socket(0x10, 0x803, 0x0)
sendmsg$BATADV_CMD_GET_MESH(r10, &(0x7f00000004c0)={0x0, 0x0, &(0x7f0000000480)={0x0, 0x32}}, 0x0) (async)
getsockname$packet(r10, &(0x7f0000000100)={0x11, 0x0, <r11=>0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0x14)
sendmsg$nl_route(r9, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000240)={&(0x7f0000000000)=ANY=[@ANYBLOB="3800000010000507000000000004000000000000", @ANYRES32=r11, @ANYBLOB="00000016010000001800120008000100736974000c0002000800030036"], 0x38}}, 0x0) (async)
sendmsg$nl_route(r10, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000500)={&(0x7f0000000180)=ANY=[@ANYBLOB="60000000100039042cbd7000eaffffff000003e4", @ANYRES32=r11, @ANYBLOB="8300040000000000400012800800010073697400340002800500090029000000060010000b00000008000c000000008006000d000900000008000300e000000106000e"], 0x60}, 0x1, 0x0, 0x0, 0x8000}, 0x4040)
sendto$phonet(r5, 0x0, 0x0, 0x10, 0x0, 0x0)

618.924059ms ago: executing program 4 (id=1340):
r0 = bpf$MAP_CREATE(0x0, &(0x7f00000000c0)=@base={0x1b, 0x0, 0x0, 0x8000}, 0x48)
r1 = bpf$MAP_CREATE(0x0, &(0x7f00000001c0)=@base={0x8, 0x4, 0x4, 0x2, 0x0, 0x1, 0xfffffffc}, 0x50)
bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x6, 0x15, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000010000000000000000000018110000", @ANYRES32=r0, @ANYBLOB="0000000000000000b7080000860000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000002100850000008200000018110000", @ANYRES32=r1, @ANYBLOB="fffffffffffffff8b7080000000000007b8af8ff00000000bca2000000000000a6020000f8ffffffb703000008000000b704000000000000850000003300000095"], &(0x7f0000000180)='GPL\x00', 0x0, 0x0, 0x0, 0x41000, 0x0, '\x00', 0x0, @fallback=0x38, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94)

609.694856ms ago: executing program 2 (id=1341):
bpf$PROG_LOAD(0x5, &(0x7f0000000100)={0x10, 0x4, &(0x7f00000001c0)=ANY=[], &(0x7f0000000340)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0xf, '\x00', 0x0, @fallback=0x2e, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x10}, 0x94)
r0 = syz_init_net_socket$bt_sco(0x1f, 0x5, 0x2)
bind$bt_sco(r0, &(0x7f0000000040)={0x1f, @fixed={'\xaa\xaa\xaa\xaa\xaa', 0x11}}, 0x8)
listen(r0, 0x8)
r1 = bpf$MAP_CREATE(0x0, &(0x7f00000000c0)=ANY=[@ANYBLOB="01000000120000007f00000001"], 0x48)
bpf$MAP_UPDATE_CONST_STR(0x2, &(0x7f00000002c0)={{r1}, &(0x7f00000001c0), &(0x7f0000000280)='%pS    \x00'}, 0x20)
r2 = socket$nl_route(0x10, 0x3, 0x0)
socketpair$tipc(0x1e, 0x5, 0x0, &(0x7f0000000000)={0xffffffffffffffff, <r3=>0xffffffffffffffff})
ioctl$sock_SIOCGIFINDEX(r3, 0x8933, &(0x7f0000000800)={'bridge0\x00', <r4=>0x0})
sendmsg$nl_route(r2, &(0x7f0000000200)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f00000004c0)=ANY=[@ANYBLOB="3000000071000100000000000000000007000000", @ANYRES32=r4, @ANYBLOB="0c00018008000100000001000c0002"], 0x30}, 0x1, 0x0, 0x0, 0x44}, 0x0)
r5 = syz_init_net_socket$bt_sco(0x1f, 0x5, 0x2)
bind$bt_sco(r5, &(0x7f0000000400)={0x1f, @fixed={'\xaa\xaa\xaa\xaa\xaa', 0x11}}, 0x8)
listen(r5, 0xc)
r6 = socket$kcm(0x10, 0x2, 0x0)
r7 = socket(0x10, 0x3, 0x0)
r8 = socket$nl_route(0x10, 0x3, 0x0)
r9 = bpf$MAP_CREATE(0x0, &(0x7f00000002c0)=ANY=[@ANYBLOB="1b00000000000000000000000080"], 0x48)
sendmsg(r5, &(0x7f0000000840)={&(0x7f0000000240)=@nl=@kern={0x10, 0x0, 0x0, 0x800000}, 0x80, &(0x7f0000000700)=[{&(0x7f0000000600)="66820e5f51457843b4eaa9a9eab6c059ae0e8f87580cbc94c547da8e38ab1542a0ed249927c930e0511c8450511d8583c398efa58769eb9730bbd123142558cc4329144d109144d0a0ab9bd8c185bcd75931b6fbaf6ae2878ee7e5bed769d7a526a419b6a56c1ac8f84ebbe1be3833588f10df11c54a832160ac1e3d87d3b21137d900a1d1530ed1ba63a4d8c86cf080cb38d744fe1ad0042e727a7a192b44cc9122ab16fc7b470f976c4de2e9fc4f07e096d13314f7c8a435fbd58f8d94ff78ad17926cd01d03a2fe583853a27282f8e0561e5417ceb36b164966dbe8021238da8c3b4850756b730db2e4dfa4fe7092e0d77b5fc1b1dd9324bd07b81fa9a9", 0xff}], 0x1, &(0x7f0000000740)=ANY=[@ANYBLOB="a0000000000000000401000002000000b4d9be8bf3e41fd5afb067a748644b9e90169879c6c3bba5c42ffbf9104ebd736b36ea96b4f8eb1fea760a069d46d9d6d8ed8b236e17857c780c6aabd916b6649a0719e69555d547ce8e8556a9823f04e028b1e0295299d42b8d2c84801ecedf3c60bbc01a6a0661478d88c5c4769016a23b8e9b2c2734def8249fcd6f41e3bc51d86ccd140762ccf54d1d2db1000000"], 0xa0}, 0x80)
r10 = syz_init_net_socket$bt_l2cap(0x1f, 0x3, 0x0)
bind$bt_l2cap(r10, &(0x7f0000000000)={0x1f, 0x0, @any, 0x0, 0x1}, 0xe)
connect$bt_l2cap(r10, &(0x7f0000000080)={0x1f, 0x401, @fixed={'\xaa\xaa\xaa\xaa\xaa', 0xe}, 0x0, 0x1}, 0xe)
bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000000)={0x1f, 0x15, &(0x7f00000008c0)=ANY=[@ANYBLOB="1800000000000000000000000800000018110000", @ANYRES32=r9, @ANYRES64=r9, @ANYRES32=r9, @ANYBLOB="0000000000000000b7080000030000207b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b70400000300000085000000a600000095"], &(0x7f00000005c0)='syzkaller\x00', 0x0, 0x0, 0x0, 0x40f00, 0x7b, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0xfffffffe}, 0x94)
r11 = socket$nl_route(0x10, 0x3, 0x0)
sendmsg$nl_route(r11, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000300)={&(0x7f0000000200)=ANY=[@ANYBLOB="1c0000004a0000082abd7000fbdbdf250a000000", @ANYRES32=0x0, @ANYBLOB="ffffff7f"], 0x1c}, 0x1, 0x0, 0x0, 0x20000000}, 0x0)
r12 = socket$inet_mptcp(0x2, 0x1, 0x106)
setsockopt$inet_tcp_int(r12, 0x6, 0x22, &(0x7f0000000180)=0x4c40, 0x4)
sendmmsg$inet(r12, &(0x7f0000003d00)=[{{&(0x7f0000000000)={0x2, 0x4e20, @loopback}, 0x10, &(0x7f0000000040), 0x1}}, {{0x0, 0x0, 0x0, 0x0, 0x0, 0x7}}, {{0x0, 0x0, 0x0}}], 0x3, 0x200080fc)
ioctl$ifreq_SIOCGIFINDEX_vcan(r8, 0x8933, &(0x7f0000000040)={'vxcan0\x00'})
sendmsg$nl_route(r7, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000340)=ANY=[], 0x24}, 0x1, 0x0, 0x0, 0x40000}, 0x0)
write$cgroup_subtree(r6, &(0x7f0000000000)=ANY=[@ANYBLOB="563f000019"], 0xfe33)

295.77106ms ago: executing program 4 (id=1342):
socket$nl_route(0x10, 0x3, 0x0)
r0 = bpf$MAP_CREATE(0x0, &(0x7f00000002c0)=ANY=[@ANYBLOB="1b00000000000000000000000080"], 0x48)
r1 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000340)={0x1f, 0x15, &(0x7f0000000580)=ANY=[@ANYBLOB="18000000fcffffff000000008000000018010000", @ANYRES32=r0, @ANYBLOB="0000000000000000b7080000020000207b8ae8ff00000000bfa200000000000007020000f8ffffffb703000008000000b70400000200000085000000a600000018110000", @ANYRES32=r0, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000002000000850000008200000095"], &(0x7f0000000000)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x11}, 0x94)
bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000500)={r1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x48)

205.51571ms ago: executing program 3 (id=1343):
r0 = socket$qrtr(0x2a, 0x2, 0x0)
connect$qrtr(r0, &(0x7f0000000040)={0x2a, 0xffffffff, 0xfffffffe}, 0xc)
writev(r0, &(0x7f0000000340)=[{&(0x7f0000000080)="fb", 0x1}], 0x1)
r1 = socket$alg(0x26, 0x5, 0x0)
bind$alg(r1, &(0x7f0000000280)={0x26, 'skcipher\x00', 0x0, 0x0, 'ctr(sm4)\x00'}, 0x58)
r2 = socket(0xa, 0x3, 0x3a)
setsockopt$MRT6_ADD_MIF(r2, 0x29, 0xca, &(0x7f0000000040)={0x0, 0x1, 0x8, 0x0, 0x401}, 0xc)
ioctl$SIOCSIFMTU(r2, 0x8922, &(0x7f0000000000)={'pim6reg\x00', 0x2})
setsockopt$MRT6_FLUSH(r2, 0x29, 0xd4, &(0x7f0000000080)=0xc, 0x4)
write(r2, &(0x7f00000005c0)="bd4a8510e9fec000ac1bbd4f42e45352bfa9a260ace9f2ca3fce8a70c329569ac1dea724f53ba245f1681d23feaec165ecb5e224f8b64890d756131d6498311c7198f9b22e2ad24f4cd2d25f2dc9b997209b95d51440efd2f838e5a5c7807f562fb3901e456df8e8fc1713545a863defbc8b0017b2d3031ccfd04d8103810392b9fb8337265eaa0f6f1808c84005fbeec726d0956c20b2b150b325f9b15b36c571c1b991513f5df987bd6fa3396820c645d4e6d7d4797508db74993d4d0d4ea9c1d88b706c8e6579fafb7bab2b4df8cb3042d5dc9a010da2b017d6a0fbc32919e3c9ff77b733", 0xe6)
setsockopt$ALG_SET_KEY(r1, 0x117, 0x1, &(0x7f0000000140)="2c385aa3d49100dc6626c892b6bc436a", 0x10)
r3 = accept4(r1, 0x0, 0x0, 0x80000)
r4 = socket$netlink(0x10, 0x3, 0x4)
bind$netlink(r4, &(0x7f0000514ff4)={0x10, 0x0, 0x0, 0x2ffffffff}, 0xc)
setsockopt$sock_int(r4, 0x1, 0x8, &(0x7f0000000000), 0x4)
r5 = socket(0x10, 0x3, 0x0)
socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000000)={<r6=>0xffffffffffffffff})
r7 = socket$nl_netfilter(0x10, 0x3, 0xc)
sendmsg$NFT_BATCH(r7, &(0x7f000000c2c0)={0x0, 0x0, &(0x7f0000000200)={&(0x7f00000008c0)=ANY=[@ANYBLOB="140000001000010000000000000000000000000a28000000000a0101000000005e1affd5020000000900010073797a300000000008000240000000032c000000030a01030000e6ff00000000020000000900010073797a30000000000900030073797a320000000014000000110001"], 0x7c}}, 0x0)
sendmsg$NFT_BATCH(r7, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000240)={&(0x7f0000000080)={{0x14}, [@NFT_MSG_NEWRULE={0x78, 0x6, 0xa, 0x160b, 0x0, 0x0, {0x2, 0x0, 0xa}, [@NFTA_RULE_EXPRESSIONS={0x4c, 0x4, 0x0, 0x1, [{0x18, 0x1, 0x0, 0x1, @osf={{0x8}, @val={0xc, 0x2, 0x0, 0x1, [@NFTA_OSF_FLAGS={0x8}]}}}, {0x30, 0x1, 0x0, 0x1, @nat={{0x8}, @val={0x24, 0x2, 0x0, 0x1, [@NFTA_NAT_REG_ADDR_MIN={0x8, 0x3, 0x1, 0x0, 0x14}, @NFTA_NAT_TYPE={0x8}, @NFTA_NAT_FAMILY={0x8, 0x2, 0x1, 0x0, 0x2}, @NFTA_NAT_REG_PROTO_MIN={0x8, 0x5, 0x1, 0x0, 0x16}]}}}]}, @NFTA_RULE_TABLE={0x9, 0x1, 'syz0\x00'}, @NFTA_RULE_CHAIN={0x9, 0x2, 'syz2\x00'}]}], {0x14}}, 0xa0}, 0x1, 0x0, 0x0, 0x850}, 0x4040080)
r8 = bpf$MAP_CREATE(0x0, &(0x7f0000000940)=ANY=[@ANYBLOB="12000000050000000800000002"], 0x50)
bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, &(0x7f0000000140)={{r8, <r9=>0xffffffffffffffff}, &(0x7f0000000180), &(0x7f0000000100)=r6}, 0x20)
bpf$MAP_LOOKUP_ELEM(0x1, &(0x7f0000000240)={r9, &(0x7f00000003c0), 0x0}, 0x20)
sendmsg$sock(r3, &(0x7f0000002440)={&(0x7f0000000380)=@ethernet={0x6, @link_local={0x1, 0x80, 0xc2, 0x0, 0x0, 0x3}}, 0x80, &(0x7f0000002380)=[{&(0x7f0000000400)="f93bc1fa1083352869c6a3350bda54335f411a0e809b8768ad6008477f34be105d1f70273170e73cdb7f5940912e4f072ba12c16921f6792453d23d358484608b67fb681c5d60045aa0f1fd4afa55cc79620db3f8e2a8314560c3684e0775c71face8973e0746e126113bbc3117a99c7b0eb526d20e160254e866844864c54bdd60e235ff979f7fbb655d3a4aa79ff78aeb3bb1cfc4202e59ae4b81936524e8a6bbda02de8080942c28620d14885038e07f38a109db89371e58afd448e5ae00a33738eeb7bd22aecb1a4a84c24db67af23c3d9", 0xd3}, {&(0x7f0000000500)="f16cc3786c86a3705ba74d5a38d324703da59a8aaa880893c1a080d2d1fb4a081c9ff5743f373f272dc8725af9f33c34614af43fa4f2f70a6f82cf1cdc778fdefc86d55d729f1f8d81ee8c50a67f7c25c54040a089f6374646caa1163100e1841b788a49b5c1e4146dec89f91923175984cee5247b7234c5adeaec33f3e81bdcb16106fa77b820a9fd4c52b5cffe08c78da3", 0x92}, {&(0x7f00000012c0)="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", 0x1000}, {&(0x7f00000022c0)="ff7ac3039cecf1cb0fe15c15e7ed0123736fb53f5b2e9db7", 0x18}, {&(0x7f0000002300)}, {&(0x7f0000002340)="c210184714580c0f89cb69338ec4de16df", 0x11}], 0x6, &(0x7f0000002400)=[@timestamping={{0x14, 0x1, 0x25, 0x7fff}}, @txtime={{0x18, 0x1, 0x3d, 0x4}}], 0x30}, 0x20008094)
sendmsg$nl_route_sched(r5, &(0x7f0000000200)={&(0x7f00000000c0)={0x10, 0x0, 0x0, 0x10000000}, 0xc, &(0x7f00000001c0)={&(0x7f0000001280)=@newtaction={0x18, 0x31, 0x3d, 0x0, 0x0, {}, [{0x4}]}, 0x18}}, 0x0)
sendmsg$nl_route_sched(r4, &(0x7f0000000200)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f0000000940)=@newtaction={0x18, 0x31, 0x3d, 0x500, 0x0, {}, [{0x4}]}, 0x18}}, 0x0)
syz_genetlink_get_family_id$ethtool(&(0x7f0000000180), r3)
r10 = socket(0x40000000015, 0x5, 0x0)
connect$l2tp6(r10, &(0x7f0000000200)={0xa, 0x0, 0x7, @loopback, 0x4, 0x2}, 0x20)

101.677829ms ago: executing program 2 (id=1344):
r0 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000200)={0x3, 0xc, &(0x7f0000000340)=@framed={{0x18, 0x2, 0x0, 0x0, 0x9, 0x0, 0x0, 0x0, 0x1}, [@call={0x85, 0x0, 0x0, 0x28}, @printk={@p, {}, {}, {}, {}, {0x7, 0x0, 0xb, 0x3, 0x0, 0x0, 0x3}, {0x85, 0x0, 0x0, 0x9b}}]}, &(0x7f0000000040)='GPL\x00'}, 0x94)
bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f00000002c0)={r0, 0x0, 0xe, 0x0, &(0x7f0000000100)="e0b9547ed387dbe9abc89b6f5bec", 0x0, 0x2000, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4}, 0x50)
r1 = socket$nl_route(0x10, 0x3, 0x0)
r2 = bpf$MAP_CREATE_CONST_STR(0x0, &(0x7f0000000240)={0x2, 0x4, 0x8, 0x1, 0x80, 0x0, 0x0, '\x00', 0x0, 0x0}, 0x48)
bpf$PROG_LOAD(0x5, &(0x7f0000000840)={0x3, 0xf, &(0x7f0000000d80)=@ringbuf={{0x18, 0x8, 0x0, 0x0, 0xffb0}, {{0x18, 0x1, 0x1, 0x0, r2}, {}, {}, {0x85, 0x0, 0x0, 0x5}}, {{0x5, 0x0, 0x3}}, [], {{0x6, 0x1, 0x6, 0x8}, {0x6, 0x0, 0x5, 0x8}, {0x85, 0x0, 0x0, 0x5}}}, &(0x7f0000000980)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @sched_cls, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94)
r3 = bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="060000000400000008000000080000000004"], 0x50)
r4 = socket$nl_route(0x10, 0x3, 0x0)
r5 = socket$l2tp6(0xa, 0x2, 0x73)
r6 = socket$kcm(0x29, 0x2, 0x0)
write$cgroup_pressure(r6, &(0x7f0000000140)={'full'}, 0xfffffdef)
setsockopt$sock_attach_bpf(r6, 0x1, 0x7, &(0x7f0000000340), 0x4)
setsockopt$inet6_IPV6_HOPOPTS(r5, 0x29, 0x36, &(0x7f00000001c0)={0x89}, 0x8)
close(r5)
sendmsg$nl_route(r4, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000100)={&(0x7f0000000200)=ANY=[@ANYBLOB="a00000001800090000000000fcdbdf251c140002"], 0xa0}, 0x1, 0x0, 0x0, 0x80}, 0x20000000)
ioctl$XFS_IOC_ATTRLIST_BY_HANDLE(r0, 0x4058587a, &(0x7f0000001bc0)={{<r7=>r1, &(0x7f0000001a00)='GPL\x00', 0x400080, &(0x7f0000001a40)={@align=0x1200, {0x1000, 0xfffd, 0x6, 0x1}}, 0xf, &(0x7f0000001a80)={@_ha_fsid}, &(0x7f0000001ac0)=0x101}, {[0x97, 0x401, 0x4868, 0x1]}, 0x3, 0x90, &(0x7f0000001b00)=""/144})
bpf$BPF_PROG_WITH_BTFID_LOAD(0x5, &(0x7f0000001d80)=@bpf_tracing={0x1a, 0x8, &(0x7f0000000780)=@raw=[@kfunc={0x85, 0x0, 0x2, 0x0, 0x1}, @ringbuf_query={{0x18, 0x1, 0x1, 0x0, r3}}, @jmp={0x5, 0x1, 0x8, 0x3, 0x9, 0x10, 0x4}, @map_idx_val={0x18, 0x0, 0x6, 0x0, 0x4, 0x0, 0x0, 0x0, 0x1}], &(0x7f00000007c0)='GPL\x00', 0x7, 0x1000, &(0x7f0000000a00)=""/4096, 0x41000, 0x10, '\x00', 0x0, 0x1a, r7, 0x8, &(0x7f0000001c40)={0x0, 0x2}, 0x8, 0x10, &(0x7f0000001c80)={0x3, 0x3, 0xa956, 0x4}, 0x10, 0x2141f, r0, 0x6, &(0x7f0000001cc0)=[r3, r3, r3, r3, r3, r3, r3, r3], &(0x7f0000001d00)=[{0x1, 0x1, 0xd, 0x9}, {0x0, 0x3, 0x3, 0x1}, {0x2, 0x3, 0xb, 0x6}, {0x2, 0x2, 0x2, 0x5}, {0x2, 0x4, 0xd, 0x2}, {0x0, 0x4, 0x5, 0x6}], 0x10, 0x100}, 0x94)
sendmsg$nl_route(r1, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000080)=@newlink={0x50, 0x10, 0x421, 0x4, 0x25dfdbfc, {0x0, 0x0, 0x0, 0x0, 0x88a8ffad, 0x26d2}, [@IFLA_LINKINFO={0x24, 0x12, 0x0, 0x1, @xfrm={{0x9}, {0x14, 0x2, 0x0, 0x1, [@IFLA_XFRM_LINK={0x8, 0x1, 0x3}, @IFLA_XFRM_IF_ID={0x8, 0x2, 0x25}]}}}, @IFLA_BROADCAST={0xa}]}, 0x50}}, 0xc080)
r8 = socket$kcm(0x10, 0x2, 0x10)
sendmsg$kcm(r8, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000480)=[{&(0x7f0000000000)="1400000010003507d25a806f8c6394f90324fc60", 0x14}], 0x1}, 0x0)
recvmsg$kcm(r8, &(0x7f0000000380)={0x0, 0x0, &(0x7f0000000080)=[{&(0x7f0000000500)=""/4096, 0x1000}], 0x1}, 0x0)
r9 = socket$nl_generic(0x10, 0x3, 0x10)
sendmsg$nl_generic(r9, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000940)=ANY=[@ANYBLOB="3400000040000701feffffff00000000017c0000040042800c00018006000600800a0000100002800900068004"], 0x34}, 0x1, 0x0, 0x0, 0x48815}, 0xc000)
sendmsg$nl_route(r1, &(0x7f0000000740)={&(0x7f0000000680)={0x10, 0x0, 0x0, 0x200000}, 0xc, &(0x7f0000000700)={&(0x7f00000006c0)=@ipv4_getrule={0x1c, 0x22, 0x4, 0x70bd25, 0x25dfdbfc, {0x2, 0x10, 0x10, 0xfc, 0x5, 0x0, 0x0, 0x7, 0x2}, ["", "", "", "", "", "", ""]}, 0x1c}, 0x1, 0x0, 0x0, 0x84800}, 0x20040080)
sendmmsg(r1, &(0x7f0000000640)=[{{0x0, 0x0, &(0x7f0000000580)=[{&(0x7f0000000000)="be8a3b1f80f2b7661f3efd715be7a70db05af46aff70", 0x16}, {&(0x7f0000000100)="e66d4ea98d6b9ef2380b50b034bf5bd925af8397daa0a57beca12993342b106b77b55019ac1a4d9ad7bdf24f34fcf0b2efa97d7028a9425ac51f4bd9b233bb60431d5a0541893504491c6ce28fe3d60d14be507c14f43f79be5c74788b0470d9c36dc5c16aa5b8b6fbfb62a79ca4cd", 0x6f}, {&(0x7f0000000180)="8fe039568a28e1cefe87717aac02991e2be93b76229de5526d5a108a79b4468628e659a18410cf284d2e012e115a4a9f3eafeaff6735e4b22f5a35c123397a7eb96829c8352f728863575ea793", 0x4d}, {&(0x7f0000000240)="9ed7ba06dd6005", 0x7}, {&(0x7f00000002c0)="f3f59add8d6d67fc63b1f9ae411e72b06f944bbbe55217522ccdfb4fb9fbcf7c78f6b5", 0x23}, {&(0x7f0000000300)="2ca95ba20f3497672575c58e1169b740dc4d4b24f723bd6655a73474bac3dc86722ffa1c6f358cc82b357f9b11ae64a0a47ab87540cb4a10357f4132f5e55d482051b573d8dbbafa3e37e7c411f0bf4e5f7d9792bff915f3302cddea170a10d57577d15d16b024e725e4c44b88296427410ffe4e77c9d39585e58d0878a009f5fe2c9298814f095b3258114a00dab917d0ab6f2bd16f01eb901f2135b54572", 0x9f}, {&(0x7f00000003c0)="ddd9a61c6aa8104a02fcf52619a181326565175fc610bb0eb746f0cd2230f5e87fbaf5640aabb40e141198c47fbef7482d6c584904efa7266e0e8054b9c525dc54d336d66133fb5994b9c08fd4b0cb1d30083c6d82cfd0938eb1c676a5687d36fcf5beba8488e4ef1e777bf13b98aea8a42936f47352f6428f0cdff2d11fee4a347d8e875b20ece16207e19d23e3c8dee27fc5535cb3dd7d9ece272cdfeec1fb70d826a0764dc6ae72eb0fdbc8516afc1acb316216d97b30ee4ee3", 0xbb}, {&(0x7f0000000480)="aa4625a54219ee7ff3a0b46f5afe785f7f03e270504fbb75985aa31f24aed9e8bf1cafa3ca646afc29b9119e73ef5559", 0x30}, {&(0x7f00000004c0)="e033590dfbaa665501fcef833788f855b285978f4cc54352dc96f863cc0a1d4512deef38d68a9f2ed80a0ae5691e9626a4dfd5bb3b8947132720b43ae8f25f8d3771f05f6c5351", 0x47}, {&(0x7f0000000540)="40110f9e319fb8943918037718a11a101973e4ae605376711b28cf8d0be30d6e0616fd", 0x23}], 0xa}}], 0x1, 0x4044001)

61.867469ms ago: executing program 1 (id=1345):
r0 = socket$l2tp(0x2, 0x2, 0x73)
bind$inet(r0, &(0x7f00000002c0)={0x2, 0x4e20, @empty}, 0x10)
connect$inet(r0, &(0x7f0000000200)={0x2, 0x0, @local}, 0x10)
sendmmsg$inet(r0, &(0x7f0000000900)=[{{0x0, 0x0, 0x0}}], 0x40000cf, 0x0)
sendmsg$NFT_BATCH(0xffffffffffffffff, &(0x7f000000c2c0)={0x0, 0x0, &(0x7f0000000200)={0x0, 0x7c}}, 0x0)
r1 = socket$inet6(0xa, 0x2, 0x0)
r2 = openat$tun(0xffffffffffffff9c, &(0x7f0000000100), 0x0, 0x0)
ioctl$TUNSETIFF(r2, 0x400454ca, &(0x7f0000000040)={'syzkaller0\x00', 0x2})
r3 = openat$tun(0xffffffffffffff9c, &(0x7f0000000400), 0x0, 0x0)
close(r3)
socketpair$unix(0x1, 0x2, 0x0, &(0x7f00000001c0))
ioctl$SIOCSIFHWADDR(r3, 0x8914, &(0x7f0000000000)={'syzkaller0\x00', @broadcast})
r4 = socket$nl_route(0x10, 0x3, 0x0)
r5 = socket$nl_route(0x10, 0x3, 0x0)
r6 = socket$unix(0x1, 0x1, 0x0)
ioctl$sock_SIOCGIFINDEX(r6, 0x8933, &(0x7f0000000100)={'syzkaller0\x00', <r7=>0x0})
sendmsg$nl_route_sched(r5, &(0x7f00000012c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000140)=@newqdisc={0x44, 0x24, 0x4ee4e6a52ff56541, 0x70bd2a, 0xffffffff, {0x0, 0x0, 0x0, r7, {0x0, 0xfff1}, {0xffff, 0xffff}}, [@qdisc_kind_options=@q_hfsc={{0x9}, {0x14, 0x2, @TCA_HFSC_FSC={0x10, 0x2, {0x4d, 0xfffffffb, 0x7fffffff}}}}]}, 0x44}, 0x1, 0x0, 0x0, 0x4000000}, 0x20040084)
sendmsg$nl_route_sched(r5, &(0x7f0000001200)={0x0, 0x0, &(0x7f0000000280)={&(0x7f0000001f80)=@newqdisc={0x58, 0x28, 0x4ee4e6a52ff56541, 0x4001, 0xfffffdf8, {0x0, 0x0, 0x0, r7, {0x10}, {}, {0xa, 0x3}}, [@qdisc_kind_options=@q_tbf={{0x8}, {0x2c, 0x2, [@TCA_TBF_PARMS={0x28, 0x1, {{0x3f, 0x0, 0x0, 0x0, 0x97ab, 0x40}, {0x2, 0x0, 0x3, 0x57, 0x8, 0x3}, 0x1, 0x2, 0xa2d}}]}}]}, 0x58}, 0x1, 0x0, 0x0, 0x40098}, 0x0)
ioctl$sock_SIOCGIFINDEX(r4, 0x8933, &(0x7f0000000100)={'syzkaller0\x00', <r8=>0x0})
r9 = socket$packet(0x11, 0x3, 0x300)
sendto$packet(r9, &(0x7f0000000200)="2478546ca4fa3b0bfe4ddf30cc5a", 0xe, 0x4000050, &(0x7f00000001c0)={0x11, 0xf7, r8, 0x1, 0xd8, 0x6, @multicast}, 0x14)
r10 = socket$unix(0x1, 0x2, 0x0)
ioctl$sock_SIOCGIFINDEX(r10, 0x8933, &(0x7f0000000100)={'syzkaller0\x00', <r11=>0x0})
sendmmsg$inet(r1, &(0x7f00000017c0)=[{{&(0x7f0000000040)={0x2, 0x4e1c, @local}, 0x10, 0x0, 0x0, &(0x7f00000006c0)=[@ip_pktinfo={{0x1c, 0x0, 0x8, {r11, @dev={0xac, 0x14, 0x14, 0x41}, @empty}}}], 0x20}}], 0x1, 0x8000004)
sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000100)={&(0x7f0000000000)=@ipv6_newroute={0x30, 0x18, 0x1ef, 0x0, 0x0, {0xa, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfd}, [@RTA_GATEWAY={0x14, 0x5, @loopback={0x0, 0x2}}]}, 0x30}, 0x1, 0x11}, 0x0)
r12 = socket$nl_generic(0x10, 0x3, 0x10)
r13 = syz_genetlink_get_family_id$mptcp(&(0x7f0000000bc0), 0xffffffffffffffff)
sendmsg$MPTCP_PM_CMD_DEL_ADDR(r12, &(0x7f0000001080)={0x0, 0x0, &(0x7f0000001040)={&(0x7f0000000f00)={0x28, r13, 0x1, 0x70bd2c, 0x25dfdbff, {}, [@MPTCP_PM_ATTR_ADDR={0x14, 0x1, 0x0, 0x1, [@MPTCP_PM_ADDR_ATTR_PORT={0x6, 0x5, 0x4e22}, @MPTCP_PM_ADDR_ATTR_ID={0x5, 0x2, 0x1}]}]}, 0x28}, 0x1, 0x0, 0x0, 0x40000}, 0x14)
sendmsg$MPTCP_PM_CMD_SUBFLOW_DESTROY(0xffffffffffffffff, &(0x7f00000003c0)={&(0x7f00000000c0)={0x10, 0x0, 0x0, 0x200}, 0xc, &(0x7f0000000380)={&(0x7f0000000300)={0x4c, r13, 0x8, 0x70bd29, 0x25dfdbfe, {}, [@MPTCP_PM_ATTR_RCV_ADD_ADDRS={0x8, 0x2, 0x8}, @MPTCP_PM_ATTR_LOC_ID={0x5, 0x5, 0x4}, @MPTCP_PM_ATTR_ADDR={0x20, 0x1, 0x0, 0x1, [@MPTCP_PM_ADDR_ATTR_FLAGS={0x8, 0x6, 0x1e}, @MPTCP_PM_ADDR_ATTR_ADDR6={0x14, 0x4, @mcast2}]}, @MPTCP_PM_ATTR_TOKEN={0x8, 0x4, 0x10000}]}, 0x4c}, 0x1, 0x0, 0x0, 0x20000000}, 0x4c804)
bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000200)={0x1e, 0x4, &(0x7f0000000140)=ANY=[], 0x0, 0x0, 0x0, 0x0, 0x40f00, 0x0, '\x00', 0x0, 0x24}, 0x94)

2.011476ms ago: executing program 0 (id=1346):
r0 = socket(0x2, 0x3, 0xff)
r1 = socket$inet6_tcp(0xa, 0x1, 0x0) (async, rerun: 64)
r2 = socket$isdn_base(0x22, 0x3, 0x0) (async, rerun: 64)
sendmsg$key(r0, &(0x7f0000001700)={0x0, 0x0, &(0x7f00000016c0)={&(0x7f0000001740)=ANY=[@ANYBLOB="020d0a09160000002dbd70000bdcdf2501001400090000001300180002078b009b7149789eaa9305f7814ee4a2227b2b29c8e2c32696e575ae184a7147366778de8c07f112ae8135a22bfc3ad7769c8aa53b40457cd7a4f301a8cf434943ad8b8bb7d4e0f35f65611abd89dbee3490240a92275ce5fcc9526e191e512fb29a806f78ee6af814dc18bbc37d25cb9a632a091b06ef4b12d282b1ce48de4c1beb0e0cddd91a7f3a3e3c0be000000000006febcc94d5a99034a0c24b5b223a97c1cd56e1c7baf7eedf8f84937ab4ba688440781a2eab9e2aa0e9"], 0xb0}}, 0x0) (async, rerun: 64)
getsockopt$ax25_int(r0, 0x101, 0x2, &(0x7f0000001440), &(0x7f0000001480)=0x4) (rerun: 64)
ioctl$IMGETCOUNT(r2, 0x80044943, &(0x7f00000013c0)) (async)
setsockopt$IP6T_SO_SET_REPLACE(r1, 0x29, 0x40, &(0x7f0000000000)=@raw={'raw\x00', 0x3c1, 0x3, 0x1322, 0x1130, 0x178, 0xc, 0x1130, 0x178, 0x1270, 0x258, 0x258, 0x1270, 0x258, 0x3, 0x0, {[{{@uncond, 0x0, 0x1100, 0x1130, 0x0, {}, [@common=@unspec=@cgroup1={{0x1030}, {0x0, 0x1, 0x0, 0x0, './cgroup.cpu/syz0\x00', 0x0, {0xffffffff}}}, @common=@unspec=@addrtype1={{0x28}}]}, @common=@inet=@SET2={0x30, 'SET\x00', 0x2, {{0x2, 0x3, 0x9}, {0x1, 0x2, 0x2}, 0x2, 0x2}}}, {{@ipv6={@private2, @private0={0xfc, 0x0, '\x00', 0x1}, [], [0x0, 0x0, 0x0, 0xffffff00], '\x00', 'hsr0\x00', {0xff}}, 0x0, 0xd0, 0x140, 0x0, {}, [@inet=@rpfilter={{0x28}}]}, @common=@unspec=@NFLOG={0x70, 'NFLOG\x00', 0x0, {0xffff, 0x0, 0x59, 0x1, 0x0, "5b5e4637e2c868d14d9be48a2a79837d5499f42d086321ddfda71d6d982957c9efbee097d2c1e45c21510a84843e700c6ab764b15794236650ed3db73c2d916d"}}}], {{'\x00', 0x0, 0xa8, 0xd0}, {0x28}}}}, 0x13a0)
sendmsg$rds(r0, &(0x7f00000001c0)={&(0x7f0000001400)={0x2, 0x4e21, @local}, 0x10, &(0x7f0000000440)=[{&(0x7f0000001500)=""/218, 0xeb}], 0x1, 0x0, 0x0, 0x4c810}, 0x48804)
ioctl$XFS_IOC_FSGEOMETRY(r1, 0x8100587e, &(0x7f0000001840))

0s ago: executing program 4 (id=1347):
r0 = socket$netlink(0x10, 0x3, 0x0)
setsockopt$netlink_NETLINK_ADD_MEMBERSHIP(r0, 0x10e, 0xb, &(0x7f0000000100)=0x800000, 0x48)
syz_genetlink_get_family_id$devlink(&(0x7f0000000000), r0)
ioctl$ifreq_SIOCGIFINDEX_wireguard(r0, 0x8933, &(0x7f0000000040)={'wg2\x00', <r1=>0x0})
sendmsg$nl_route_sched(r0, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000280)={&(0x7f0000000300)=@delqdisc={0xa0, 0x25, 0x8, 0x70bd28, 0x25dfdbfb, {0x0, 0x0, 0x0, r1, {0x9, 0xf}, {0xffff, 0x9}, {0xe, 0xd}}, [@TCA_EGRESS_BLOCK={0x8, 0xe, 0xad}, @TCA_STAB={0x30, 0x8, 0x0, 0x1, [{{0x1c, 0x1, {0x5, 0x0, 0x4, 0x1, 0xdcc6e294ca40722a, 0x5, 0xb, 0x6}}, {0x10, 0x2, [0x1, 0x7, 0x6, 0xc, 0x2, 0x0]}}]}, @TCA_RATE={0x6, 0x5, {0x8, 0x1}}, @qdisc_kind_options=@q_mq={0x7}, @TCA_INGRESS_BLOCK={0x8, 0xd, 0x5a934336}, @TCA_EGRESS_BLOCK={0x8, 0xe, 0xb}, @qdisc_kind_options=@q_fq={{0x7}, {0x14, 0x2, [@TCA_FQ_RATE_ENABLE={0x8}, @TCA_FQ_INITIAL_QUANTUM={0x8, 0x4, 0x80000001}]}}, @TCA_INGRESS_BLOCK={0x8, 0xd, 0x7}]}, 0xa0}}, 0x20000000)
r2 = socket$nl_generic(0x10, 0x3, 0x10)
r3 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000040)='blkio.bfq.io_wait_time\x00', 0x275a, 0x0)
write$cgroup_int(r3, &(0x7f0000000000), 0xffffff6a)
syz_open_procfs$namespace(0x0, 0x0)
r4 = socket$l2tp6(0xa, 0x2, 0x73)
r5 = socket$inet6(0xa, 0x2, 0x0)
bind$inet6(r5, &(0x7f0000f5dfe4)={0xa, 0x4e20, 0x0, @empty}, 0x1c)
setsockopt$inet6_int(r5, 0x29, 0x3, &(0x7f0000004240)=0x40000006, 0x4)
setsockopt$inet6_IPV6_HOPOPTS(r5, 0x29, 0x36, &(0x7f0000000280)=ANY=[], 0x8)
recvmmsg(r5, &(0x7f0000007bc0)=[{{0x0, 0x0, 0x0, 0x0, &(0x7f0000000440)=""/204, 0xcc}, 0x9}], 0x1, 0x2, 0x0)
setsockopt$inet6_int(r5, 0x29, 0x8, &(0x7f0000000000)=0x7f, 0x4)
sendto$inet6(r5, 0x0, 0x0, 0x20000001, &(0x7f0000000300)={0xa, 0x4e20, 0x5, @mcast1}, 0x1c)
bind$l2tp6(r4, &(0x7f0000000000)={0xa, 0x0, 0x1, @empty, 0x0, 0x3}, 0x20)
connect$l2tp6(r4, &(0x7f0000000f40)={0xa, 0x0, 0x0, @empty}, 0x20)
sendmmsg$inet6(r4, &(0x7f0000000ac0)=[{{&(0x7f0000000180)={0xa, 0x0, 0x0, @empty}, 0x1b, 0x0, 0x0, 0x0, 0x0, 0xc0fe}}], 0x17fd147c801ae9af, 0xff14)
ioctl$FS_IOC_RESVSP(r3, 0x4030582b, &(0x7f00000001c0)={0x1100, 0x2, 0xffffffffffffffff, 0x9, 0x0, 0xfdfd})
sendmsg$DEVLINK_CMD_SB_TC_POOL_BIND_GET(r3, &(0x7f0000000600)={&(0x7f0000000080)={0x10, 0x0, 0x0, 0x400}, 0xc, &(0x7f00000005c0)={&(0x7f0000000640)=ANY=[@ANYBLOB="8c000000ed8796e1980672368907d23d6e85d6ce2580fde410c3b0b032f3ec0ad06e88d8cdcd02a1338365e241894cc7c91830aec6b177c01532f0cee56a5bc876e9170dcc598e28a7b1e2", @ANYRES16=0x0, @ANYBLOB="000127bd7000fedbdf2517000000080001007063690011000200303030303a30303a31302e3000000000080003000000000008000b000800000006001600040000000500120001000000080001007063690011000200303030303a30303a31302e3000000000080003000300000008000b00ff7f000006001600070000000500120000000000"], 0x8c}, 0x1, 0x0, 0x0, 0x80}, 0x4080)
sendmsg$nl_generic(r2, &(0x7f0000000100)={0x0, 0x0, &(0x7f0000000180)={&(0x7f00000002c0)={0x20, 0x39, 0x1, 0x7fffa, 0x25dfdaff, {0x1}, [@generic="a03df0bf1c5a81f8ec"]}, 0x20}, 0x1, 0x0, 0x0, 0x40088c0}, 0x0)
r6 = socket$nl_route(0x10, 0x3, 0x0)
ioctl$sock_SIOCGIFINDEX(r6, 0x8933, &(0x7f00000000c0)={'veth0_to_team\x00', <r7=>0x0})
bpf$MAP_CREATE(0x0, &(0x7f0000000000)=ANY=[@ANYBLOB="0a00000001000000440000002000000000000000", @ANYRES32], 0x50)
r8 = socket$nl_generic(0x10, 0x3, 0x10)
r9 = syz_genetlink_get_family_id$devlink(&(0x7f0000000400), 0xffffffffffffffff)
sendmsg$DEVLINK_CMD_TRAP_GET(r8, &(0x7f00000004c0)={0x0, 0x0, &(0x7f0000000440)={&(0x7f0000000000)=ANY=[@ANYBLOB='P\x00\x00\x00', @ANYRES16=r9, @ANYBLOB="3fab00000000000000002e"], 0x50}}, 0x0)
sendmsg$nl_route_sched(r6, &(0x7f00000003c0)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f0000000140)=@getchain={0x24, 0x11, 0x839, 0x70bd28, 0x0, {0x0, 0x0, 0x0, r7, {0x1, 0x2}, {0xd}, {0x11, 0xfff1}}}, 0x24}, 0x1, 0x0, 0x0, 0x84}, 0x0)

kernel console output (not intermixed with test programs):

Warning: Permanently added '10.128.0.196' (ED25519) to the list of known hosts.
[   67.427322][ T5809] cgroup: Unknown subsys name 'net'
[   67.561483][ T5809] cgroup: Unknown subsys name 'cpuset'
[   67.570079][ T5809] cgroup: Unknown subsys name 'rlimit'
Setting up swapspace version 1, size = 127995904 bytes
[   68.877969][ T5809] Adding 124996k swap on ./swap-file.  Priority:0 extents:1 across:124996k 
[   70.728047][ T5823] Bluetooth: hci0: unexpected cc 0x0c03 length: 249 > 1
[   70.739356][   T51] Bluetooth: hci0: unexpected cc 0x1003 length: 249 > 9
[   70.747011][   T51] Bluetooth: hci0: unexpected cc 0x1001 length: 249 > 9
[   70.754726][   T51] Bluetooth: hci1: unexpected cc 0x0c03 length: 249 > 1
[   70.764000][   T51] Bluetooth: hci1: unexpected cc 0x1003 length: 249 > 9
[   70.771643][   T51] Bluetooth: hci1: unexpected cc 0x1001 length: 249 > 9
[   70.779534][   T51] Bluetooth: hci1: unexpected cc 0x0c23 length: 249 > 4
[   70.787368][   T51] Bluetooth: hci1: unexpected cc 0x0c38 length: 249 > 2
[   70.797475][ T5823] Bluetooth: hci0: unexpected cc 0x0c23 length: 249 > 4
[   70.805648][ T5823] Bluetooth: hci2: unexpected cc 0x0c03 length: 249 > 1
[   70.818568][ T5829] Bluetooth: hci0: unexpected cc 0x0c38 length: 249 > 2
[   70.822571][ T5823] Bluetooth: hci2: unexpected cc 0x1003 length: 249 > 9
[   70.838477][ T5823] Bluetooth: hci2: unexpected cc 0x1001 length: 249 > 9
[   70.849607][ T5823] Bluetooth: hci2: unexpected cc 0x0c23 length: 249 > 4
[   70.858923][ T5823] Bluetooth: hci2: unexpected cc 0x0c38 length: 249 > 2
[   70.896903][   T51] Bluetooth: hci3: unexpected cc 0x0c03 length: 249 > 1
[   70.905943][   T51] Bluetooth: hci3: unexpected cc 0x1003 length: 249 > 9
[   70.913500][   T51] Bluetooth: hci3: unexpected cc 0x1001 length: 249 > 9
[   70.922040][   T51] Bluetooth: hci3: unexpected cc 0x0c23 length: 249 > 4
[   70.929759][   T51] Bluetooth: hci3: unexpected cc 0x0c38 length: 249 > 2
[   70.952905][ T5823] Bluetooth: hci4: unexpected cc 0x0c03 length: 249 > 1
[   70.971734][ T5823] Bluetooth: hci4: unexpected cc 0x1003 length: 249 > 9
[   70.980786][ T5823] Bluetooth: hci4: unexpected cc 0x1001 length: 249 > 9
[   70.990778][ T5823] Bluetooth: hci4: unexpected cc 0x0c23 length: 249 > 4
[   71.005205][ T5823] Bluetooth: hci4: unexpected cc 0x0c38 length: 249 > 2
[   71.293947][ T1300] ieee802154 phy0 wpan0: encryption failed: -22
[   71.300427][ T1300] ieee802154 phy1 wpan1: encryption failed: -22
[   71.361280][ T5821] chnl_net:caif_netlink_parms(): no params data found
[   71.462962][ T5824] chnl_net:caif_netlink_parms(): no params data found
[   71.534157][ T5828] chnl_net:caif_netlink_parms(): no params data found
[   71.620606][ T5831] chnl_net:caif_netlink_parms(): no params data found
[   71.659654][ T5821] bridge0: port 1(bridge_slave_0) entered blocking state
[   71.667256][ T5821] bridge0: port 1(bridge_slave_0) entered disabled state
[   71.674549][ T5821] bridge_slave_0: entered allmulticast mode
[   71.681692][ T5821] bridge_slave_0: entered promiscuous mode
[   71.704740][ T5832] chnl_net:caif_netlink_parms(): no params data found
[   71.726223][ T5821] bridge0: port 2(bridge_slave_1) entered blocking state
[   71.733401][ T5821] bridge0: port 2(bridge_slave_1) entered disabled state
[   71.741096][ T5821] bridge_slave_1: entered allmulticast mode
[   71.748027][ T5821] bridge_slave_1: entered promiscuous mode
[   71.845010][ T5828] bridge0: port 1(bridge_slave_0) entered blocking state
[   71.852284][ T5828] bridge0: port 1(bridge_slave_0) entered disabled state
[   71.859833][ T5828] bridge_slave_0: entered allmulticast mode
[   71.866683][ T5828] bridge_slave_0: entered promiscuous mode
[   71.887347][ T5824] bridge0: port 1(bridge_slave_0) entered blocking state
[   71.894560][ T5824] bridge0: port 1(bridge_slave_0) entered disabled state
[   71.901747][ T5824] bridge_slave_0: entered allmulticast mode
[   71.908696][ T5824] bridge_slave_0: entered promiscuous mode
[   71.921000][ T5828] bridge0: port 2(bridge_slave_1) entered blocking state
[   71.928077][ T5828] bridge0: port 2(bridge_slave_1) entered disabled state
[   71.935540][ T5828] bridge_slave_1: entered allmulticast mode
[   71.942463][ T5828] bridge_slave_1: entered promiscuous mode
[   71.951660][ T5821] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link
[   71.966279][ T5824] bridge0: port 2(bridge_slave_1) entered blocking state
[   71.973707][ T5824] bridge0: port 2(bridge_slave_1) entered disabled state
[   71.980938][ T5824] bridge_slave_1: entered allmulticast mode
[   71.987789][ T5824] bridge_slave_1: entered promiscuous mode
[   72.020997][ T5821] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link
[   72.081293][ T5824] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link
[   72.093199][ T5824] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link
[   72.113254][ T5828] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link
[   72.148892][ T5832] bridge0: port 1(bridge_slave_0) entered blocking state
[   72.156029][ T5832] bridge0: port 1(bridge_slave_0) entered disabled state
[   72.163372][ T5832] bridge_slave_0: entered allmulticast mode
[   72.170470][ T5832] bridge_slave_0: entered promiscuous mode
[   72.179550][ T5828] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link
[   72.206023][ T5821] team0: Port device team_slave_0 added
[   72.213918][ T5821] team0: Port device team_slave_1 added
[   72.219808][ T5831] bridge0: port 1(bridge_slave_0) entered blocking state
[   72.226912][ T5831] bridge0: port 1(bridge_slave_0) entered disabled state
[   72.234336][ T5831] bridge_slave_0: entered allmulticast mode
[   72.241315][ T5831] bridge_slave_0: entered promiscuous mode
[   72.257514][ T5832] bridge0: port 2(bridge_slave_1) entered blocking state
[   72.264689][ T5832] bridge0: port 2(bridge_slave_1) entered disabled state
[   72.271888][ T5832] bridge_slave_1: entered allmulticast mode
[   72.279149][ T5832] bridge_slave_1: entered promiscuous mode
[   72.287324][ T5828] team0: Port device team_slave_0 added
[   72.305656][ T5831] bridge0: port 2(bridge_slave_1) entered blocking state
[   72.312855][ T5831] bridge0: port 2(bridge_slave_1) entered disabled state
[   72.320049][ T5831] bridge_slave_1: entered allmulticast mode
[   72.326894][ T5831] bridge_slave_1: entered promiscuous mode
[   72.335693][ T5824] team0: Port device team_slave_0 added
[   72.351295][ T5828] team0: Port device team_slave_1 added
[   72.382074][ T5824] team0: Port device team_slave_1 added
[   72.409077][ T5832] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link
[   72.418835][ T5821] batman_adv: batadv0: Adding interface: batadv_slave_0
[   72.425781][ T5821] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem.
[   72.451712][ T5821] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active
[   72.464064][ T5821] batman_adv: batadv0: Adding interface: batadv_slave_1
[   72.471055][ T5821] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem.
[   72.498367][ T5821] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active
[   72.511534][ T5831] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link
[   72.539463][ T5832] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link
[   72.557463][ T5831] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link
[   72.575571][ T5828] batman_adv: batadv0: Adding interface: batadv_slave_0
[   72.582675][ T5828] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem.
[   72.608887][ T5828] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active
[   72.638577][ T5824] batman_adv: batadv0: Adding interface: batadv_slave_0
[   72.645535][ T5824] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem.
[   72.671597][ T5824] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active
[   72.684167][ T5828] batman_adv: batadv0: Adding interface: batadv_slave_1
[   72.691548][ T5828] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem.
[   72.717615][ T5828] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active
[   72.754694][ T5824] batman_adv: batadv0: Adding interface: batadv_slave_1
[   72.761742][ T5824] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem.
[   72.787861][ T5824] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active
[   72.806874][ T5832] team0: Port device team_slave_0 added
[   72.814653][ T5832] team0: Port device team_slave_1 added
[   72.829225][ T5831] team0: Port device team_slave_0 added
[   72.842962][ T5831] team0: Port device team_slave_1 added
[   72.874654][ T5821] hsr_slave_0: entered promiscuous mode
[   72.881571][ T5821] hsr_slave_1: entered promiscuous mode
[   72.888938][ T5823] Bluetooth: hci1: command tx timeout
[   72.888943][   T51] Bluetooth: hci0: command tx timeout
[   72.929802][ T5832] batman_adv: batadv0: Adding interface: batadv_slave_0
[   72.936761][ T5832] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem.
[   72.962865][ T5832] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active
[   72.968383][ T5823] Bluetooth: hci3: command tx timeout
[   72.974022][   T51] Bluetooth: hci2: command tx timeout
[   72.990234][ T5831] batman_adv: batadv0: Adding interface: batadv_slave_0
[   72.997175][ T5831] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem.
[   73.023145][ T5831] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active
[   73.052519][ T5832] batman_adv: batadv0: Adding interface: batadv_slave_1
[   73.058418][   T51] Bluetooth: hci4: command tx timeout
[   73.059626][ T5832] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem.
[   73.090811][ T5832] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active
[   73.110886][ T5831] batman_adv: batadv0: Adding interface: batadv_slave_1
[   73.117844][ T5831] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem.
[   73.144114][ T5831] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active
[   73.181567][ T5828] hsr_slave_0: entered promiscuous mode
[   73.187765][ T5828] hsr_slave_1: entered promiscuous mode
[   73.194033][ T5828] debugfs: 'hsr0' already exists in 'hsr'
[   73.199853][ T5828] Cannot create hsr debugfs directory
[   73.216563][ T5824] hsr_slave_0: entered promiscuous mode
[   73.223003][ T5824] hsr_slave_1: entered promiscuous mode
[   73.229186][ T5824] debugfs: 'hsr0' already exists in 'hsr'
[   73.234911][ T5824] Cannot create hsr debugfs directory
[   73.383411][ T5832] hsr_slave_0: entered promiscuous mode
[   73.389683][ T5832] hsr_slave_1: entered promiscuous mode
[   73.395634][ T5832] debugfs: 'hsr0' already exists in 'hsr'
[   73.401465][ T5832] Cannot create hsr debugfs directory
[   73.420931][ T5831] hsr_slave_0: entered promiscuous mode
[   73.427355][ T5831] hsr_slave_1: entered promiscuous mode
[   73.433589][ T5831] debugfs: 'hsr0' already exists in 'hsr'
[   73.439347][ T5831] Cannot create hsr debugfs directory
[   73.748118][ T5821] netdevsim netdevsim0 netdevsim0: renamed from eth0
[   73.759827][ T5821] netdevsim netdevsim0 netdevsim1: renamed from eth1
[   73.785038][ T5821] netdevsim netdevsim0 netdevsim2: renamed from eth2
[   73.816799][ T5821] netdevsim netdevsim0 netdevsim3: renamed from eth3
[   73.885507][ T5828] netdevsim netdevsim3 netdevsim0: renamed from eth0
[   73.900471][ T5828] netdevsim netdevsim3 netdevsim1: renamed from eth1
[   73.910226][ T5828] netdevsim netdevsim3 netdevsim2: renamed from eth2
[   73.936216][ T5828] netdevsim netdevsim3 netdevsim3: renamed from eth3
[   74.000445][ T5832] netdevsim netdevsim2 netdevsim0: renamed from eth0
[   74.011202][ T5832] netdevsim netdevsim2 netdevsim1: renamed from eth1
[   74.023275][ T5832] netdevsim netdevsim2 netdevsim2: renamed from eth2
[   74.044526][ T5832] netdevsim netdevsim2 netdevsim3: renamed from eth3
[   74.130172][ T5824] netdevsim netdevsim1 netdevsim0: renamed from eth0
[   74.151324][ T5824] netdevsim netdevsim1 netdevsim1: renamed from eth1
[   74.162392][ T5824] netdevsim netdevsim1 netdevsim2: renamed from eth2
[   74.172801][ T5824] netdevsim netdevsim1 netdevsim3: renamed from eth3
[   74.224967][ T5821] 8021q: adding VLAN 0 to HW filter on device bond0
[   74.287102][ T5831] netdevsim netdevsim4 netdevsim0: renamed from eth0
[   74.298662][ T5821] 8021q: adding VLAN 0 to HW filter on device team0
[   74.309782][ T5831] netdevsim netdevsim4 netdevsim1: renamed from eth1
[   74.344264][  T148] bridge0: port 1(bridge_slave_0) entered blocking state
[   74.351608][  T148] bridge0: port 1(bridge_slave_0) entered forwarding state
[   74.361097][  T148] bridge0: port 2(bridge_slave_1) entered blocking state
[   74.368212][  T148] bridge0: port 2(bridge_slave_1) entered forwarding state
[   74.380440][ T5831] netdevsim netdevsim4 netdevsim2: renamed from eth2
[   74.391312][ T5831] netdevsim netdevsim4 netdevsim3: renamed from eth3
[   74.438033][ T5828] 8021q: adding VLAN 0 to HW filter on device bond0
[   74.476923][ T5828] 8021q: adding VLAN 0 to HW filter on device team0
[   74.486522][ T5832] 8021q: adding VLAN 0 to HW filter on device bond0
[   74.514100][ T3572] bridge0: port 1(bridge_slave_0) entered blocking state
[   74.521247][ T3572] bridge0: port 1(bridge_slave_0) entered forwarding state
[   74.560824][ T5832] 8021q: adding VLAN 0 to HW filter on device team0
[   74.575930][ T3572] bridge0: port 2(bridge_slave_1) entered blocking state
[   74.583092][ T3572] bridge0: port 2(bridge_slave_1) entered forwarding state
[   74.593711][ T5824] 8021q: adding VLAN 0 to HW filter on device bond0
[   74.607786][ T5821] hsr0: Slave B (hsr_slave_1) is not up; please bring it up to get a fully working HSR network
[   74.625318][   T12] bridge0: port 1(bridge_slave_0) entered blocking state
[   74.632471][   T12] bridge0: port 1(bridge_slave_0) entered forwarding state
[   74.672510][   T12] bridge0: port 2(bridge_slave_1) entered blocking state
[   74.679684][   T12] bridge0: port 2(bridge_slave_1) entered forwarding state
[   74.740667][ T5824] 8021q: adding VLAN 0 to HW filter on device team0
[   74.786201][ T5828] hsr0: Slave B (hsr_slave_1) is not up; please bring it up to get a fully working HSR network
[   74.815997][   T35] bridge0: port 1(bridge_slave_0) entered blocking state
[   74.823198][   T35] bridge0: port 1(bridge_slave_0) entered forwarding state
[   74.860386][ T5831] 8021q: adding VLAN 0 to HW filter on device bond0
[   74.881241][  T148] bridge0: port 2(bridge_slave_1) entered blocking state
[   74.888376][  T148] bridge0: port 2(bridge_slave_1) entered forwarding state
[   74.927348][ T5831] 8021q: adding VLAN 0 to HW filter on device team0
[   74.968849][   T51] Bluetooth: hci1: command tx timeout
[   74.968972][ T5823] Bluetooth: hci0: command tx timeout
[   74.993950][ T5821] 8021q: adding VLAN 0 to HW filter on device batadv0
[   75.045378][   T35] bridge0: port 1(bridge_slave_0) entered blocking state
[   75.048981][ T5823] Bluetooth: hci3: command tx timeout
[   75.052540][   T35] bridge0: port 1(bridge_slave_0) entered forwarding state
[   75.065286][ T5823] Bluetooth: hci2: command tx timeout
[   75.095378][   T35] bridge0: port 2(bridge_slave_1) entered blocking state
[   75.102559][   T35] bridge0: port 2(bridge_slave_1) entered forwarding state
[   75.144691][ T5823] Bluetooth: hci4: command tx timeout
[   75.309480][ T5832] 8021q: adding VLAN 0 to HW filter on device batadv0
[   75.320079][ T5828] 8021q: adding VLAN 0 to HW filter on device batadv0
[   75.371943][ T5821] veth0_vlan: entered promiscuous mode
[   75.415291][ T5824] 8021q: adding VLAN 0 to HW filter on device batadv0
[   75.447868][ T5821] veth1_vlan: entered promiscuous mode
[   75.535161][ T5828] veth0_vlan: entered promiscuous mode
[   75.566347][ T5821] veth0_macvtap: entered promiscuous mode
[   75.577458][ T5832] veth0_vlan: entered promiscuous mode
[   75.596279][ T5824] veth0_vlan: entered promiscuous mode
[   75.603431][ T5828] veth1_vlan: entered promiscuous mode
[   75.615829][ T5832] veth1_vlan: entered promiscuous mode
[   75.625978][ T5821] veth1_macvtap: entered promiscuous mode
[   75.650179][ T5824] veth1_vlan: entered promiscuous mode
[   75.670861][ T5831] 8021q: adding VLAN 0 to HW filter on device batadv0
[   75.704675][ T5821] batman_adv: batadv0: Interface activated: batadv_slave_0
[   75.727724][ T5828] veth0_macvtap: entered promiscuous mode
[   75.749045][ T5821] batman_adv: batadv0: Interface activated: batadv_slave_1
[   75.773461][ T5828] veth1_macvtap: entered promiscuous mode
[   75.797225][  T148] netdevsim netdevsim0 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0
[   75.829082][  T148] netdevsim netdevsim0 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0
[   75.840603][  T148] netdevsim netdevsim0 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0
[   75.851951][ T5832] veth0_macvtap: entered promiscuous mode
[   75.862816][ T5828] batman_adv: batadv0: Interface activated: batadv_slave_0
[   75.882103][  T148] netdevsim netdevsim0 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0
[   75.896686][ T5832] veth1_macvtap: entered promiscuous mode
[   75.903957][ T5824] veth0_macvtap: entered promiscuous mode
[   75.913921][ T5824] veth1_macvtap: entered promiscuous mode
[   75.928087][ T5828] batman_adv: batadv0: Interface activated: batadv_slave_1
[   75.956948][   T12] netdevsim netdevsim3 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0
[   75.983288][   T12] netdevsim netdevsim3 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0
[   75.998155][   T12] netdevsim netdevsim3 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0
[   76.019037][   T12] netdevsim netdevsim3 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0
[   76.035899][ T5824] batman_adv: batadv0: Interface activated: batadv_slave_0
[   76.064712][ T5832] batman_adv: batadv0: Interface activated: batadv_slave_0
[   76.077102][ T5824] batman_adv: batadv0: Interface activated: batadv_slave_1
[   76.093251][   T35] netdevsim netdevsim1 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0
[   76.116284][ T5832] batman_adv: batadv0: Interface activated: batadv_slave_1
[   76.125075][   T35] netdevsim netdevsim1 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0
[   76.158679][   T35] netdevsim netdevsim1 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0
[   76.174964][   T59] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50
[   76.183109][   T59] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50
[   76.203536][   T35] netdevsim netdevsim1 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0
[   76.213968][   T35] netdevsim netdevsim2 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0
[   76.236762][   T35] netdevsim netdevsim2 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0
[   76.245900][   T35] netdevsim netdevsim2 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0
[   76.272542][   T35] netdevsim netdevsim2 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0
[   76.326175][   T59] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50
[   76.326225][ T5831] veth0_vlan: entered promiscuous mode
[   76.343100][   T59] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50
[   76.362924][   T59] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50
[   76.389401][ T5831] veth1_vlan: entered promiscuous mode
[   76.395240][   T59] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50
[   76.432454][  T148] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50
[   76.442788][  T148] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50
[   76.454840][ T5821] soft_limit_in_bytes is deprecated and will be removed. Please report your usecase to linux-mm@kvack.org if you depend on this functionality.
[   76.511459][   T59] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50
[   76.526376][   T59] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50
[   76.644217][   T12] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50
[   76.658481][   T12] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50
[   76.691276][ T5831] veth0_macvtap: entered promiscuous mode
[   76.697586][   T59] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50
[   76.720982][   T59] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50
[   76.754948][ T5831] veth1_macvtap: entered promiscuous mode
[   76.815444][   T12] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50
[   76.849542][   T12] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50
[   76.880305][ T5831] batman_adv: batadv0: Interface activated: batadv_slave_0
[   76.930777][ T5831] batman_adv: batadv0: Interface activated: batadv_slave_1
[   77.001980][  T148] netdevsim netdevsim4 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0
[   77.050159][ T5823] Bluetooth: hci0: command tx timeout
[   77.050960][   T51] Bluetooth: hci1: command tx timeout
[   77.064153][  T148] netdevsim netdevsim4 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0
[   77.066378][ T5948] Zero length message leads to an empty skb
[   77.073873][  T148] netdevsim netdevsim4 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0
[   77.091607][  T148] netdevsim netdevsim4 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0
[   77.128724][   T51] Bluetooth: hci2: command tx timeout
[   77.134357][ T5823] Bluetooth: hci3: command tx timeout
[   77.208958][ T5823] Bluetooth: hci4: command tx timeout
[   77.224294][ T5955] syzkaller0: entered promiscuous mode
[   77.239224][ T5955] syzkaller0: entered allmulticast mode
[   77.423784][   T59] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50
[   77.457156][   T59] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50
[   77.573772][  T148] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50
[   77.598453][  T148] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50
[   77.662408][ T5975] gre1: entered allmulticast mode
[   77.685417][ T5974] vlan1: entered promiscuous mode
[   77.836068][ T5977] netdevsim netdevsim2 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[   77.950641][ T5977] netdevsim netdevsim2 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[   77.979772][ T5991] sctp: [Deprecated]: syz.1.19 (pid 5991) Use of int in maxseg socket option.
[   77.979772][ T5991] Use struct sctp_assoc_value instead
[   78.005367][ T5990] netlink: 'syz.3.20': attribute type 1 has an invalid length.
[   78.013770][ T5990] netlink: 8 bytes leftover after parsing attributes in process `syz.3.20'.
[   78.052298][ T5997] netlink: 44 bytes leftover after parsing attributes in process `syz.0.21'.
[   78.072910][ T5997] netlink: 8 bytes leftover after parsing attributes in process `syz.0.21'.
[   78.096108][ T5997] netlink: 28 bytes leftover after parsing attributes in process `syz.0.21'.
[   78.116903][ T5997] netlink: 8 bytes leftover after parsing attributes in process `syz.0.21'.
[   78.142134][ T5997] netlink: 2 bytes leftover after parsing attributes in process `syz.0.21'.
[   78.155097][ T5997] netlink: 28 bytes leftover after parsing attributes in process `syz.0.21'.
[   78.166063][ T5997] netlink: 24 bytes leftover after parsing attributes in process `syz.0.21'.
[   78.211605][ T5977] netdevsim netdevsim2 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[   78.324737][ T6003] netlink: 36 bytes leftover after parsing attributes in process `syz.0.24'.
[   78.344526][ T5977] netdevsim netdevsim2 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[   78.358435][ T6003] netlink: 211768 bytes leftover after parsing attributes in process `syz.0.24'.
[   78.412637][ T6001] syzkaller0: entered promiscuous mode
[   78.425096][ T6001] syzkaller0: entered allmulticast mode
[   78.915063][ T6022] bridge0: port 1(bridge_slave_0) entered disabled state
[   78.972507][ T6026] Illegal XDP return value 4294967274 on prog  (id 9) dev N/A, expect packet loss!
[   78.987273][ T6022] bridge_slave_0 (unregistering): left allmulticast mode
[   79.012038][ T6022] bridge_slave_0 (unregistering): left promiscuous mode
[   79.027919][ T6022] bridge0: port 1(bridge_slave_0) entered disabled state
[   79.130695][ T5823] Bluetooth: hci1: command tx timeout
[   79.137818][   T51] Bluetooth: hci0: command tx timeout
[   79.208904][   T51] Bluetooth: hci3: command tx timeout
[   79.214806][ T5823] Bluetooth: hci2: command tx timeout
[   79.288617][   T51] Bluetooth: hci4: command tx timeout
[   79.583176][ T6061] syz.4.35 uses obsolete (PF_INET,SOCK_PACKET)
[   79.935657][ T6080] netlink: 'syz.1.39': attribute type 1 has an invalid length.
[   79.996456][ T6082] netlink: 'syz.1.39': attribute type 1 has an invalid length.
[   80.017950][ T6084] netlink: 'syz.4.41': attribute type 18 has an invalid length.
[   80.216190][ T6093] 8021q: adding VLAN 0 to HW filter on device ipvlan2
[   80.356917][ T6105] bridge0: port 2(bridge_slave_1) entered disabled state
[   80.364949][ T6105] bridge0: port 1(bridge_slave_0) entered disabled state
[   80.388604][ T6105] bridge0: port 2(bridge_slave_1) entered blocking state
[   80.395813][ T6105] bridge0: port 2(bridge_slave_1) entered forwarding state
[   80.403330][ T6105] bridge0: port 1(bridge_slave_0) entered blocking state
[   80.410517][ T6105] bridge0: port 1(bridge_slave_0) entered forwarding state
[   80.430083][ T6105] bridge0: port 2(bridge_slave_1) entered disabled state
[   80.437366][ T6105] bridge0: port 1(bridge_slave_0) entered disabled state
[   80.697113][ T6118] vti0: entered promiscuous mode
[   80.718233][ T6118] vti0: entered allmulticast mode
[   80.970170][ T6133] x_tables: ip_tables: TCPOPTSTRIP target: only valid in mangle table, not filter
[   80.996386][ T6136] FAULT_INJECTION: forcing a failure.
[   80.996386][ T6136] name fail_usercopy, interval 1, probability 0, space 0, times 1
[   81.051444][ T6136] CPU: 0 UID: 0 PID: 6136 Comm: syz.4.55 Not tainted syzkaller #0 PREEMPT(full) 
[   81.051468][ T6136] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 03/18/2026
[   81.051486][ T6136] Call Trace:
[   81.051494][ T6136]  <TASK>
[   81.051501][ T6136]  dump_stack_lvl+0xe8/0x150
[   81.051537][ T6136]  should_fail_ex+0x412/0x560
[   81.051568][ T6136]  _copy_to_user+0x31/0xb0
[   81.051591][ T6136]  simple_read_from_buffer+0xe1/0x170
[   81.051620][ T6136]  proc_fail_nth_read+0x1bb/0x230
[   81.051648][ T6136]  ? __pfx_proc_fail_nth_read+0x10/0x10
[   81.051675][ T6136]  ? rw_verify_area+0x2a6/0x4d0
[   81.051693][ T6136]  ? __pfx_proc_fail_nth_read+0x10/0x10
[   81.051719][ T6136]  vfs_read+0x20c/0xa70
[   81.051737][ T6136]  ? fdget_pos+0x246/0x320
[   81.051758][ T6136]  ? __pfx___mutex_lock+0x10/0x10
[   81.051777][ T6136]  ? __pfx_vfs_read+0x10/0x10
[   81.051798][ T6136]  ? __fget_files+0x2a/0x420
[   81.051818][ T6136]  ? __fget_files+0x3a0/0x420
[   81.051833][ T6136]  ? __fget_files+0x2a/0x420
[   81.051862][ T6136]  ksys_read+0x150/0x270
[   81.051884][ T6136]  ? __pfx_ksys_read+0x10/0x10
[   81.051912][ T6136]  do_syscall_64+0x14d/0xf80
[   81.051928][ T6136]  ? trace_irq_disable+0x3b/0x150
[   81.051943][ T6136]  ? entry_SYSCALL_64_after_hwframe+0x77/0x7f
[   81.051961][ T6136]  ? clear_bhb_loop+0x40/0x90
[   81.051981][ T6136]  entry_SYSCALL_64_after_hwframe+0x77/0x7f
[   81.051998][ T6136] RIP: 0033:0x7fbcc255d04e
[   81.052018][ T6136] Code: 08 0f 85 a5 a8 ff ff 49 89 fb 48 89 f0 48 89 d7 48 89 ce 4c 89 c2 4d 89 ca 4c 8b 44 24 08 4c 8b 4c 24 10 4c 89 5c 24 08 0f 05 <c3> 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 80 00 00 00 00 48 83 ec 08
[   81.052031][ T6136] RSP: 002b:00007fbcc337cfe8 EFLAGS: 00000246 ORIG_RAX: 0000000000000000
[   81.052050][ T6136] RAX: ffffffffffffffda RBX: 00007fbcc337d6c0 RCX: 00007fbcc255d04e
[   81.052063][ T6136] RDX: 000000000000000f RSI: 00007fbcc337d0a0 RDI: 0000000000000003
[   81.052073][ T6136] RBP: 00007fbcc337d090 R08: 0000000000000000 R09: 0000000000000000
[   81.052083][ T6136] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001
[   81.052093][ T6136] R13: 00007fbcc2816038 R14: 00007fbcc2815fa0 R15: 00007fffc7efea88
[   81.052122][ T6136]  </TASK>
[   81.494590][ T6156] netlink: 'syz.1.59': attribute type 21 has an invalid length.
[   81.633998][ T6156] netlink: 'syz.1.59': attribute type 1 has an invalid length.
[   81.729595][ T6163] netlink: 'syz.4.61': attribute type 2 has an invalid length.
[   81.835702][ T6170] netlink: 'syz.3.63': attribute type 2 has an invalid length.
[   81.850224][ T6163] : entered promiscuous mode
[   81.938056][ T6170] !��: entered promiscuous mode
[   81.952565][ T3506] netdevsim netdevsim2 eth0: set [1, 0] type 2 family 0 port 6081 - 0
[   82.204489][ T3506] netdevsim netdevsim2 eth1: set [1, 0] type 2 family 0 port 6081 - 0
[   82.219993][ T6186] netlink: 'syz.0.68': attribute type 1 has an invalid length.
[   82.292815][  T148] netdevsim netdevsim2 eth2: set [1, 0] type 2 family 0 port 6081 - 0
[   82.378331][  T148] netdevsim netdevsim2 eth3: set [1, 0] type 2 family 0 port 6081 - 0
[   82.388143][ T6189] warning: `syz.3.70' uses wireless extensions which will stop working for Wi-Fi 7 hardware; use nl80211
[   82.428362][ T6193] block nbd1: not configured, cannot reconfigure
[   82.676797][ T6208] netlink: 'syz.3.76': attribute type 2 has an invalid length.
[   83.528674][ T6248] __nla_validate_parse: 19 callbacks suppressed
[   83.528693][ T6248] netlink: 52 bytes leftover after parsing attributes in process `syz.1.90'.
[   83.599293][ T6248] netlink: 8 bytes leftover after parsing attributes in process `syz.1.90'.
[   83.602110][ T6254] openvswitch: netlink: Flow actions may not be safe on all matching packets.
[   83.968690][ T6268] netdevsim netdevsim4 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[   83.990547][ T6281] x_tables: ip_tables: DNAT target: used from hooks POSTROUTING, but only usable from PREROUTING/OUTPUT
[   84.023599][ T6283] netlink: 4 bytes leftover after parsing attributes in process `syz.2.98'.
[   84.121995][ T6268] netdevsim netdevsim4 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[   84.161446][ T6286] netlink: 16 bytes leftover after parsing attributes in process `syz.3.100'.
[   84.309920][ T6293] netlink: 8 bytes leftover after parsing attributes in process `syz.3.102'.
[   84.327235][ T6268] netdevsim netdevsim4 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[   84.482988][ T6268] netdevsim netdevsim4 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[   84.844490][   T35] netdevsim netdevsim4 eth0: set [1, 0] type 2 family 0 port 6081 - 0
[   84.905265][ T6303] netlink: 228 bytes leftover after parsing attributes in process `syz.3.106'.
[   84.960170][ T6305] netlink: 8 bytes leftover after parsing attributes in process `syz.1.107'.
[   84.972872][ T6298] bridge0: port 2(bridge_slave_1) entered disabled state
[   85.075791][ T6298] batman_adv: batadv0: Interface deactivated: batadv_slave_0
[   85.094100][ T6298] batman_adv: batadv0: Interface deactivated: batadv_slave_1
[   85.187491][ T6305] ip6gretap1: entered allmulticast mode
[   85.196825][  T105] netdevsim netdevsim0 netdevsim0: unset [1, 0] type 2 family 0 port 6081 - 0
[   85.212562][  T105] netdevsim netdevsim0 netdevsim1: unset [1, 0] type 2 family 0 port 6081 - 0
[   85.223534][  T105] netdevsim netdevsim0 netdevsim2: unset [1, 0] type 2 family 0 port 6081 - 0
[   85.258369][  T105] netdevsim netdevsim0 netdevsim3: unset [1, 0] type 2 family 0 port 6081 - 0
[   85.277704][  T105] netdevsim netdevsim4 eth1: set [1, 0] type 2 family 0 port 6081 - 0
[   85.323562][  T105] netdevsim netdevsim4 eth2: set [1, 0] type 2 family 0 port 6081 - 0
[   85.359092][  T105] netdevsim netdevsim4 eth3: set [1, 0] type 2 family 0 port 6081 - 0
[   85.428957][ T6318] team0: entered promiscuous mode
[   85.434961][ T6318] team_slave_0: entered promiscuous mode
[   85.468963][ T6318] team_slave_1: entered promiscuous mode
[   85.488761][ T6318] A link change request failed with some changes committed already. Interface team0 may have been left with an inconsistent configuration, please check.
[   85.730305][ T6340] netlink: 44 bytes leftover after parsing attributes in process `syz.1.116'.
[   85.794511][ T6340] netlink: 12 bytes leftover after parsing attributes in process `syz.1.116'.
[   86.148995][ T6356] netlink: 12 bytes leftover after parsing attributes in process `syz.0.121'.
[   86.355026][ T6364] netlink: 'syz.3.125': attribute type 4 has an invalid length.
[   86.405356][ T6365] netlink: 'syz.3.125': attribute type 4 has an invalid length.
[   86.445786][ T6364] netlink: 'syz.3.125': attribute type 4 has an invalid length.
[   86.651892][  T796] cfg80211: failed to load regulatory.db
[   87.464315][ T6409] bond1: entered promiscuous mode
[   87.469760][ T6409] 8021q: adding VLAN 0 to HW filter on device bond1
[   87.488937][ T6417] bridge1: entered promiscuous mode
[   87.495330][ T6417] bond1: (slave bridge1): Enslaving as an active interface with an up link
[   87.535243][ T6418] bond1 (unregistering): (slave bridge1): Releasing backup interface
[   87.596748][ T6418] bridge1: left promiscuous mode
[   87.613248][ T6418] bond1 (unregistering): Released all slaves
[   87.756881][ T3506] nci: nci_rf_intf_activated_ntf_packet: unsupported rf_interface 0xff
[   88.007301][ T6448] openvswitch: netlink: Flow actions may not be safe on all matching packets.
[   88.137191][ T6454] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium
[   88.157277][ T6454] netlink: 'syz.2.149': attribute type 10 has an invalid length.
[   88.229628][ T6454] bond0: (slave wlan1): Enslaving as an active interface with an up link
[   88.376955][ T6463] macsec1: entered promiscuous mode
[   88.383694][ T6463] macsec1: entered allmulticast mode
[   88.521389][ T6471] xt_hashlimit: size too large, truncated to 1048576
[   88.782416][ T6483] netlink: 'syz.4.157': attribute type 2 has an invalid length.
[   88.866989][ T6483] !��9: entered promiscuous mode
[   89.413342][ T6520] netlink: 'syz.4.165': attribute type 11 has an invalid length.
[   89.539370][ T6529] RDS: rds_bind could not find a transport for ::1400:0:0:0, load rds_tcp or rds_rdma?
[   89.637689][ T6533] veth0: entered promiscuous mode
[   89.685960][ T6533] veth0: left promiscuous mode
[   89.726095][ T6541] __nla_validate_parse: 11 callbacks suppressed
[   89.726111][ T6541] netlink: 24 bytes leftover after parsing attributes in process `syz.4.172'.
[   89.785229][ T6536] netlink: 24 bytes leftover after parsing attributes in process `syz.4.172'.
[   89.824250][ T6547] netlink: 14 bytes leftover after parsing attributes in process `syz.0.173'.
[   89.866647][ T6547] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface
[   89.931606][ T6547] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface
[   89.959414][ T6547] bond0 (unregistering): Released all slaves
[   90.483525][ T6587] netlink: 'syz.1.183': attribute type 1 has an invalid length.
[   90.546932][ T6587] workqueue: Failed to create a rescuer kthread for wq "bond1": -EINTR
[   91.740240][ T6613] netlink: 12 bytes leftover after parsing attributes in process `syz.1.187'.
[   91.759892][ T6613] netlink: 28 bytes leftover after parsing attributes in process `syz.1.187'.
[   91.776476][ T6613] netlink: 12 bytes leftover after parsing attributes in process `syz.1.187'.
[   91.786785][ T6613] netlink: 28 bytes leftover after parsing attributes in process `syz.1.187'.
[   91.800060][ T6613] netlink: 36 bytes leftover after parsing attributes in process `syz.1.187'.
[   91.812916][ T6615] netlink: 104 bytes leftover after parsing attributes in process `syz.4.188'.
[   91.957369][ T6623] ip6_tunnel: non-ECT from fc02:0000:0000:0000:0000:0000:0000:0001 with DS=0x67
[   91.970210][ T6625] ip6_tunnel: non-ECT from fc02:0000:0000:0000:0000:0000:0000:0001 with DS=0x67
[   92.258074][ T6621] netlink: 40 bytes leftover after parsing attributes in process `syz.4.190'.
[   92.776251][ T6662] vcan0: tx drop: invalid sa for name 0x0000000000000002
[   93.058358][ T6668] IPVS: Scheduler module ip_vs_ not found
[   93.085189][ T6672] IPVS: Scheduler module ip_vs_ not found
[   93.265032][ T6686] bridge_slave_0: left allmulticast mode
[   93.304867][ T6686] bridge_slave_0: left promiscuous mode
[   93.317835][ T6686] bridge0: port 1(bridge_slave_0) entered disabled state
[   93.337532][ T6686] bridge_slave_1: left allmulticast mode
[   93.355987][ T6686] bridge_slave_1: left promiscuous mode
[   93.366329][ T6686] bridge0: port 2(bridge_slave_1) entered disabled state
[   93.391990][ T6686] bond0: (slave bond_slave_0): Releasing backup interface
[   93.422720][ T6686] bond0: (slave bond_slave_1): Releasing backup interface
[   93.452694][ T6686] team0: Port device team_slave_0 removed
[   93.483136][ T6686] team0: Port device team_slave_1 removed
[   93.499981][ T6686] batman_adv: batadv0: Interface deactivated: batadv_slave_0
[   93.507380][ T6686] batman_adv: batadv0: Removing interface: batadv_slave_0
[   93.547769][ T6697] netlink: 'syz.3.208': attribute type 1 has an invalid length.
[   93.571628][ T6686] batman_adv: batadv0: Interface deactivated: batadv_slave_1
[   93.572756][ T6697] netlink: 'syz.3.208': attribute type 2 has an invalid length.
[   93.588578][ T6686] batman_adv: batadv0: Removing interface: batadv_slave_1
[   93.592025][ T6697] netlink: 'syz.3.208': attribute type 1 has an invalid length.
[   93.609880][ T6686] A link change request failed with some changes committed already. Interface hsr_slave_0 may have been left with an inconsistent configuration, please check.
[   93.676997][ T6687] netlink: 'syz.1.205': attribute type 16 has an invalid length.
[   94.046102][ T6692] bridge0: port 2(bridge_slave_1) entered disabled state
[   94.053856][ T6692] bridge0: port 1(bridge_slave_0) entered disabled state
[   94.179614][ T6722] xt_connbytes: Forcing CT accounting to be enabled
[   94.506439][ T6692] batman_adv: batadv0: Interface deactivated: batadv_slave_0
[   94.536836][ T6692] batman_adv: batadv0: Interface deactivated: batadv_slave_1
[   94.655374][   T35] netdevsim netdevsim2 eth0: unset [1, 0] type 2 family 0 port 6081 - 0
[   94.678293][   T35] netdevsim netdevsim2 eth1: unset [1, 0] type 2 family 0 port 6081 - 0
[   94.716394][   T35] netdevsim netdevsim2 eth2: unset [1, 0] type 2 family 0 port 6081 - 0
[   94.745731][   T35] netdevsim netdevsim2 eth3: unset [1, 0] type 2 family 0 port 6081 - 0
[   94.782855][ T6732] xt_hashlimit: size too large, truncated to 1048576
[   94.880591][   T47] IPVS: starting estimator thread 0...
[   94.892464][ T6735] __nla_validate_parse: 3 callbacks suppressed
[   94.892481][ T6735] netlink: 20 bytes leftover after parsing attributes in process `syz.2.218'.
[   94.945816][ T6735] bond1: entered allmulticast mode
[   94.951749][ T6735] 8021q: adding VLAN 0 to HW filter on device bond1
[   94.975588][ T6736] IPVS: using max 35 ests per chain, 84000 per kthread
[   95.017190][ T6743] netlink: 24 bytes leftover after parsing attributes in process `syz.2.221'.
[   95.114935][ T6745] gre1: left allmulticast mode
[   95.533992][ T6769] netlink: 'syz.4.228': attribute type 1 has an invalid length.
[   95.574453][ T6764] netlink: 'syz.1.227': attribute type 1 has an invalid length.
[   96.066069][ T6790] netlink: 48 bytes leftover after parsing attributes in process `syz.1.234'.
[   96.251970][ T6796] batadv_slave_0: entered promiscuous mode
[   96.257974][ T6796] batadv_slave_0: entered allmulticast mode
[   96.490873][ T6807] bridge_slave_0: left allmulticast mode
[   96.496733][ T6807] bridge_slave_0: left promiscuous mode
[   96.513219][ T6807] bridge0: port 1(bridge_slave_0) entered disabled state
[   96.551481][ T6807] bridge_slave_1: left allmulticast mode
[   96.569527][ T6807] bridge_slave_1: left promiscuous mode
[   96.592267][ T6807] bridge0: port 2(bridge_slave_1) entered disabled state
[   96.647492][ T6807] bond0: (slave bond_slave_0): Releasing backup interface
[   96.671548][ T6807] bond0: (slave bond_slave_1): Releasing backup interface
[   96.686695][ T6807] team_slave_0: left promiscuous mode
[   96.695981][ T6807] team0: Failed to send options change via netlink (err -105)
[   96.705124][ T6807] team0: Failed to send port change of device team_slave_0 via netlink (err -105)
[   96.715256][ T6807] team0: Port device team_slave_0 removed
[   96.722086][ T6807] team_slave_1: left promiscuous mode
[   96.730974][ T6807] team0: Failed to send options change via netlink (err -105)
[   96.744755][ T6807] team0: Failed to send port change of device team_slave_1 via netlink (err -105)
[   96.773179][ T6807] team0: Port device team_slave_1 removed
[   96.804694][ T6807] batman_adv: batadv0: Interface deactivated: batadv_slave_0
[   96.838321][ T6807] batman_adv: batadv0: Removing interface: batadv_slave_0
[   96.866873][ T6807] batman_adv: batadv0: Interface deactivated: batadv_slave_1
[   96.892584][ T6807] batman_adv: batadv0: Removing interface: batadv_slave_1
[   96.915833][ T6807] A link change request failed with some changes committed already. Interface hsr_slave_0 may have been left with an inconsistent configuration, please check.
[   96.936543][ T6809] team0: Mode changed to "broadcast"
[   97.005346][ T6817] netlink: 'syz.4.244': attribute type 83 has an invalid length.
[   97.174819][   T35] netdevsim netdevsim0 eth0: set [0, 0] type 1 family 0 port 8472 - 0
[   97.201601][   T35] netdevsim netdevsim0 eth1: set [0, 0] type 1 family 0 port 8472 - 0
[   97.229606][   T35] netdevsim netdevsim0 eth2: set [0, 0] type 1 family 0 port 8472 - 0
[   97.241605][ T6830] netlink: 'syz.4.247': attribute type 1 has an invalid length.
[   97.267388][   T35] netdevsim netdevsim0 eth3: set [0, 0] type 1 family 0 port 8472 - 0
[   97.286353][ T6830] netlink: 91 bytes leftover after parsing attributes in process `syz.4.247'.
[   97.386975][ T6838] netlink: 'syz.3.249': attribute type 11 has an invalid length.
[   97.397908][ T6838] netlink: 'syz.3.249': attribute type 23 has an invalid length.
[   97.421320][ T6838] netlink: 224 bytes leftover after parsing attributes in process `syz.3.249'.
[   97.430412][ T6830] netlink: 4 bytes leftover after parsing attributes in process `syz.4.247'.
[   97.516043][   T47] IPVS: starting estimator thread 0...
[   97.522960][ T6836] netlink: 16 bytes leftover after parsing attributes in process `syz.3.249'.
[   97.532329][ T6843] netlink: 84 bytes leftover after parsing attributes in process `syz.1.248'.
[   97.543956][ T6836] netlink: 32 bytes leftover after parsing attributes in process `syz.3.249'.
[   97.564794][ T6836] gretap1: entered promiscuous mode
[   97.638266][ T6844] IPVS: using max 33 ests per chain, 79200 per kthread
[   97.715600][ T6846] syzkaller0: entered promiscuous mode
[   97.730859][ T6846] syzkaller0: entered allmulticast mode
[   97.752541][ T6848] vlan2: entered promiscuous mode
[   97.757732][ T6848] bridge0: entered promiscuous mode
[   97.992753][ T6857] xt_hashlimit: size too large, truncated to 1048576
[   98.268663][ T6866] netlink: 32 bytes leftover after parsing attributes in process `syz.4.256'.
[   99.788737][ T6892] ip6gretap0: entered promiscuous mode
[  100.125418][ T6920] openvswitch: netlink: Invalid VLAN frame
[  100.529523][ T6949] netlink: 'syz.1.274': attribute type 8 has an invalid length.
[  100.569997][ T6955] netlink: 'syz.1.274': attribute type 8 has an invalid length.
[  100.762351][ T6973] vlan3: entered promiscuous mode
[  100.901749][ T6982] __nla_validate_parse: 2 callbacks suppressed
[  100.901767][ T6982] netlink: 8 bytes leftover after parsing attributes in process `syz.2.279'.
[  101.049419][ T6990] netlink: 20 bytes leftover after parsing attributes in process `syz.0.281'.
[  101.377400][ T6994] Cannot find add_set index 2 as target
[  101.551623][ T6996] netlink: 'syz.2.284': attribute type 14 has an invalid length.
[  101.561761][ T6996] netlink: 8 bytes leftover after parsing attributes in process `syz.2.284'.
[  101.625234][ T6998] netlink: 12 bytes leftover after parsing attributes in process `syz.2.285'.
[  101.648073][ T6998] bond2: entered promiscuous mode
[  101.653629][ T6998] 8021q: adding VLAN 0 to HW filter on device bond2
[  101.811062][ T7008] openvswitch: netlink: Actions may not be safe on all matching packets
[  103.538157][ T6957] nci: __nci_request: wait_for_completion_interruptible_timeout failed -512
[  103.720252][ T7020] netlink: 8 bytes leftover after parsing attributes in process `syz.0.293'.
[  103.734155][ T7021] netlink: 84 bytes leftover after parsing attributes in process `syz.1.292'.
[  103.758392][ T7021] netlink: 12 bytes leftover after parsing attributes in process `syz.1.292'.
[  103.782518][ T7021] netlink: 20 bytes leftover after parsing attributes in process `syz.1.292'.
[  104.307863][ T7041] netlink: 'syz.4.295': attribute type 1 has an invalid length.
[  104.488916][ T7069] netlink: 72 bytes leftover after parsing attributes in process `syz.3.301'.
[  104.512251][ T7066] netlink: 12 bytes leftover after parsing attributes in process `syz.3.301'.
[  104.800452][ T7046] syz.0.296 (7046) used greatest stack depth: 17128 bytes left
[  104.821658][ T7076] IPVS: set_ctl: invalid protocol: 44 0.0.0.0:20004
[  107.207784][ T7183] netlink: 'syz.0.332': attribute type 1 has an invalid length.
[  107.241738][ T7183] bond0: entered promiscuous mode
[  107.261230][ T7183] 8021q: adding VLAN 0 to HW filter on device bond0
[  107.275815][ T7187] __nla_validate_parse: 1 callbacks suppressed
[  107.275832][ T7187] netlink: 128 bytes leftover after parsing attributes in process `syz.2.334'.
[  107.292086][ T7187] netlink: 152 bytes leftover after parsing attributes in process `syz.2.334'.
[  107.303181][ T7187] netlink: 36 bytes leftover after parsing attributes in process `syz.2.334'.
[  107.373231][ T7183] 8021q: adding VLAN 0 to HW filter on device bond0
[  107.395923][ T7183] bond0: (slave ip6gre1): The slave device specified does not support setting the MAC address
[  107.435622][ T7183] bond0: (slave ip6gre1): Setting fail_over_mac to active for active-backup mode
[  107.462664][ T7183] bond0: (slave ip6gre1): making interface the new active one
[  107.470623][ T7183] ip6gre1: entered promiscuous mode
[  107.485104][ T7183] bond0: (slave ip6gre1): Enslaving as an active interface with an up link
[  107.506118][ T7187] netlink: 36 bytes leftover after parsing attributes in process `syz.2.334'.
[  107.524789][ T7187] netlink: 36 bytes leftover after parsing attributes in process `syz.2.334'.
[  107.539962][ T7187] netlink: 36 bytes leftover after parsing attributes in process `syz.2.334'.
[  107.559029][ T7187] netlink: 36 bytes leftover after parsing attributes in process `syz.2.334'.
[  107.585913][ T7187] netlink: 36 bytes leftover after parsing attributes in process `syz.2.334'.
[  107.595201][ T7187] netlink: 36 bytes leftover after parsing attributes in process `syz.2.334'.
[  107.605643][ T7187] netlink: 36 bytes leftover after parsing attributes in process `syz.2.334'.
[  107.663011][ T7200] erspan1: entered allmulticast mode
[  107.796407][ T7210] netlink: 'syz.2.341': attribute type 1 has an invalid length.
[  107.889303][ T7215] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium
[  107.919458][ T7215] netlink: 'syz.4.342': attribute type 10 has an invalid length.
[  108.022337][ T7215] bond0: (slave wlan1): Enslaving as an active interface with an up link
[  108.071352][ T7221] x_tables: duplicate underflow at hook 2
[  108.072956][ T7218] Bluetooth: MGMT ver 1.23
[  108.098816][ T7224] x_tables: duplicate underflow at hook 2
[  108.353474][ T7244] block nbd0: Unsupported socket: should be TCP or UNIX.
[  108.579585][ T7252] syz_tun: entered promiscuous mode
[  108.584876][ T7252] syz_tun: entered allmulticast mode
[  108.739064][ T7258] openvswitch: netlink: IP tunnel dst address not specified
[  108.859610][ T7260] bond1: (slave bridge1): Enslaving as an active interface with an up link
[  108.876858][ T7260] macvlan2: entered promiscuous mode
[  108.883202][ T7260] macvlan2: entered allmulticast mode
[  108.890535][ T7260] bond1: entered promiscuous mode
[  108.895675][ T7260] bridge1: entered promiscuous mode
[  108.902029][ T7260] 8021q: adding VLAN 0 to HW filter on device macvlan2
[  108.910236][ T7260] bond1: left promiscuous mode
[  108.915034][ T7260] bridge1: left promiscuous mode
[  110.168319][   T51] Bluetooth: hci2: Opcode 0x0401 failed: -110
[  110.168400][ T5823] Bluetooth: hci2: command 0x0401 tx timeout
[  110.408879][ T5823] Bluetooth: hci4: command tx timeout
[  125.200099][ T7281] bond1: option tlb_dynamic_lb: mode dependency failed, not supported in mode balance-rr(0)
[  125.217401][ T7281] bond1 (unregistering): Released all slaves
[  125.292589][ T7288] __nla_validate_parse: 148 callbacks suppressed
[  125.292608][ T7288] netlink: 12 bytes leftover after parsing attributes in process `syz.0.358'.
[  125.683222][ T7307] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium
[  125.716201][ T7307] netlink: 'syz.0.368': attribute type 10 has an invalid length.
[  125.734088][   T47] IPVS: starting estimator thread 0...
[  125.740799][ T7308] netlink: 20 bytes leftover after parsing attributes in process `syz.4.366'.
[  125.778273][ T7308] netlink: 4 bytes leftover after parsing attributes in process `syz.4.366'.
[  125.878344][ T7309] IPVS: using max 33 ests per chain, 79200 per kthread
[  126.386608][ T7324] netlink: 16 bytes leftover after parsing attributes in process `syz.1.371'.
[  126.426843][ T7324] netlink: 24 bytes leftover after parsing attributes in process `syz.1.371'.
[  126.744111][ T7335] netlink: 'syz.1.372': attribute type 1 has an invalid length.
[  126.760640][ T7335] netlink: 224 bytes leftover after parsing attributes in process `syz.1.372'.
[  126.792192][ T7339] ieee802154 phy0 wpan0: encryption failed: -22
[  126.802875][ T7339] netlink: 'syz.2.374': attribute type 1 has an invalid length.
[  126.814727][ T7339] netlink: 'syz.2.374': attribute type 2 has an invalid length.
[  127.410380][ T7357] sch_tbf: burst 512 is lower than device syzkaller0 mtu (1500) !
[  127.758346][ T7371] netlink: 12 bytes leftover after parsing attributes in process `syz.3.384'.
[  127.788993][ T7371] netlink: 68 bytes leftover after parsing attributes in process `syz.3.384'.
[  127.853851][ T7375] netlink: 4 bytes leftover after parsing attributes in process `syz.2.385'.
[  127.896590][ T7375] netlink: 12 bytes leftover after parsing attributes in process `syz.2.385'.
[  128.072697][ T7379] xt_hashlimit: size too large, truncated to 1048576
[  128.093801][ T7381] netlink: 'syz.2.388': attribute type 2 has an invalid length.
[  128.122460][ T7381] netlink: 'syz.2.388': attribute type 2 has an invalid length.
[  128.740548][ T7405] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium
[  128.790831][ T7405] netlink: 'syz.2.395': attribute type 10 has an invalid length.
[  128.792954][ T7407] netlink: 'syz.3.397': attribute type 1 has an invalid length.
[  128.862061][ T7407] 8021q: adding VLAN 0 to HW filter on device bond2
[  128.883590][ T7407] syzkaller0: entered promiscuous mode
[  128.889830][ T7407] syzkaller0: entered allmulticast mode
[  129.038740][ T7409] netlink: 'syz.0.398': attribute type 1 has an invalid length.
[  130.092994][ T7428] tipc: Started in network mode
[  130.113280][ T7428] tipc: Node identity a689b456bb72, cluster identity 4711
[  130.130094][ T7428] tipc: Enabled bearer <eth:syzkaller0>, priority 0
[  130.280654][ T7428] tipc: Resetting bearer <eth:syzkaller0>
[  130.309381][ T7427] tipc: Resetting bearer <eth:syzkaller0>
[  131.077302][ T7457] netlink: 'syz.0.410': attribute type 30 has an invalid length.
[  131.813750][ T7427] tipc: Disabling bearer <eth:syzkaller0>
[  131.846704][ T5880] tipc: Node number set to 503034966
[  131.853244][ T7467] sch_tbf: burst 19872 is lower than device lo mtu (65550) !
[  132.001776][ T7474] xt_CT: You must specify a L4 protocol and not use inversions on it
[  132.114690][ T7487] netlink: 'syz.0.417': attribute type 4 has an invalid length.
[  132.374875][ T7503] IPv6: RTM_NEWROUTE with no NLM_F_CREATE or NLM_F_REPLACE
[  132.382365][ T7503] IPv6: NLM_F_CREATE should be set when creating new route
[  132.455459][ T7508] ipt_REJECT: TCP_RESET invalid for non-tcp
[  132.501183][ T7503] lo: entered allmulticast mode
[  132.520078][ T7503] tunl0: entered allmulticast mode
[  132.541208][ T7503] gre0: entered allmulticast mode
[  132.579723][ T7503] gretap0: entered allmulticast mode
[  132.604953][ T7503] erspan0: entered allmulticast mode
[  132.630731][ T7503] ip_vti0: entered allmulticast mode
[  132.640251][ T7503] ip6_vti0: entered allmulticast mode
[  132.659400][ T7503] sit0: entered allmulticast mode
[  132.680812][ T7503] ip6tnl0: entered allmulticast mode
[  132.688064][ T7503] ip6gre0: entered allmulticast mode
[  132.713651][ T7503] syz_tun: entered allmulticast mode
[  132.735046][ T7503] ip6gretap0: entered allmulticast mode
[  132.753650][ T7503] bridge0: port 2(bridge_slave_1) entered disabled state
[  132.761324][ T7503] bridge0: port 1(bridge_slave_0) entered disabled state
[  132.770108][ T7503] bridge0: entered allmulticast mode
[  132.797669][ T7503] vcan0: entered allmulticast mode
[  132.807036][ T7503] bond0: entered allmulticast mode
[  132.813112][ T7503] bond_slave_0: entered allmulticast mode
[  132.825654][ T7503] bond_slave_1: entered allmulticast mode
[  132.837092][ T7503] team0: entered allmulticast mode
[  132.842541][ T7503] team_slave_0: entered allmulticast mode
[  132.855242][ T7503] team_slave_1: entered allmulticast mode
[  132.875969][ T7503] dummy0: entered allmulticast mode
[  132.896402][ T7503] nlmon0: entered allmulticast mode
[  132.905672][ T7503] caif0: entered allmulticast mode
[  132.912470][ T7503] batadv0: entered allmulticast mode
[  132.927588][ T7503] vxcan0: entered allmulticast mode
[  132.933873][ T7503] vxcan1: entered allmulticast mode
[  132.943050][ T7503] veth0: entered allmulticast mode
[  132.952880][ T7503] veth1: entered allmulticast mode
[  132.962231][ T7503] wg0: entered allmulticast mode
[  132.973543][ T7503] wg1: entered allmulticast mode
[  132.986018][ T7503] wg2: entered allmulticast mode
[  132.993509][ T7503] veth0_to_bridge: entered allmulticast mode
[  133.003642][ T7503] veth1_to_bridge: entered allmulticast mode
[  133.014859][ T7503] veth0_to_bond: entered allmulticast mode
[  133.029698][ T7503] veth1_to_bond: entered allmulticast mode
[  133.044251][ T7503] veth0_to_team: entered allmulticast mode
[  133.060637][ T7503] veth1_to_team: entered allmulticast mode
[  133.072040][ T7503] veth0_to_batadv: entered allmulticast mode
[  133.081183][ T7503] batman_adv: batadv0: Interface deactivated: batadv_slave_0
[  133.089083][ T7503] batadv_slave_0: entered allmulticast mode
[  133.097449][ T7503] veth1_to_batadv: entered allmulticast mode
[  133.112187][ T7503] batman_adv: batadv0: Interface deactivated: batadv_slave_1
[  133.128458][ T7503] batadv_slave_1: entered allmulticast mode
[  133.150185][ T7503] xfrm0: entered allmulticast mode
[  133.160560][ T7503] veth0_to_hsr: entered allmulticast mode
[  133.170317][ T7503] hsr_slave_0: entered allmulticast mode
[  133.176936][ T7503] veth1_to_hsr: entered allmulticast mode
[  133.189876][ T7503] hsr_slave_1: entered allmulticast mode
[  133.197517][ T7503] hsr0: entered allmulticast mode
[  133.204801][ T7503] veth1_virt_wifi: entered allmulticast mode
[  133.214636][ T7503] veth0_virt_wifi: entered allmulticast mode
[  133.223490][ T7503] virt_wifi0: entered allmulticast mode
[  133.231420][ T7503] veth1_vlan: entered allmulticast mode
[  133.240972][ T7503] veth0_vlan: entered allmulticast mode
[  133.263824][ T7503] vlan0: entered allmulticast mode
[  133.269388][ T7503] vlan1: entered allmulticast mode
[  133.274923][ T7503] macvlan0: entered allmulticast mode
[  133.285985][ T7503] macvlan1: entered allmulticast mode
[  133.305793][ T7503] ipvlan0: entered allmulticast mode
[  133.312442][ T7503] ipvlan1: entered allmulticast mode
[  133.318632][ T7503] veth1_macvtap: entered allmulticast mode
[  133.329380][ T7503] veth0_macvtap: entered allmulticast mode
[  133.343892][ T7503] macvtap0: entered allmulticast mode
[  133.363126][ T7503] macsec0: entered allmulticast mode
[  133.380994][ T7503] geneve0: entered allmulticast mode
[  133.394129][ T7503] geneve1: entered allmulticast mode
[  133.405310][ T7503] netdevsim netdevsim1 netdevsim0: entered allmulticast mode
[  133.419655][ T7503] netdevsim netdevsim1 netdevsim1: entered allmulticast mode
[  133.437013][ T7503] netdevsim netdevsim1 netdevsim2: entered allmulticast mode
[  133.448578][ T7503] netdevsim netdevsim1 netdevsim3: entered allmulticast mode
[  133.477929][ T7503] mac80211_hwsim hwsim5 wlan0: entered allmulticast mode
[  133.501622][ T7503] mac80211_hwsim hwsim7 wlan1: entered allmulticast mode
[  133.519826][ T7503] mac80211_hwsim hwsim12 wlan2: entered allmulticast mode
[  133.527112][ T7503] vti0: left promiscuous mode
[  133.533614][ T7503] vlan2: left promiscuous mode
[  133.539357][ T7503] vlan2: entered allmulticast mode
[  133.548864][ T7503] bridge1: entered allmulticast mode
[  133.554301][ T7503] bridge2: entered allmulticast mode
[  133.561710][ T7503] vlan3: left promiscuous mode
[  133.566618][ T7503] vlan3: entered allmulticast mode
[  133.572761][ T7503] bridge3: entered allmulticast mode
[  133.687227][  T148] netdevsim netdevsim1 netdevsim0: unset [1, 0] type 2 family 0 port 6081 - 0
[  133.701847][  T148] netdevsim netdevsim1 netdevsim1: unset [1, 0] type 2 family 0 port 6081 - 0
[  133.791443][ T7538] bond3: option lacp_active: mode dependency failed, not supported in mode balance-rr(0)
[  133.824659][ T7538] bond3 (unregistering): Released all slaves
[  133.867954][  T148] netdevsim netdevsim1 netdevsim2: unset [1, 0] type 2 family 0 port 6081 - 0
[  133.878345][  T148] netdevsim netdevsim1 netdevsim3: unset [1, 0] type 2 family 0 port 6081 - 0
[  133.973991][ T7553] 8021q: VLANs not supported on ip6_vti0
[  134.032452][ T7547] syzkaller1: entered promiscuous mode
[  134.070092][ T7547] syzkaller1: entered allmulticast mode
[  134.120631][ T7561] __nla_validate_parse: 6 callbacks suppressed
[  134.120647][ T7561] netlink: 24 bytes leftover after parsing attributes in process `syz.2.438'.
[  134.955424][ T7605] netlink: 'syz.3.450': attribute type 4 has an invalid length.
[  134.963673][ T7605] netlink: 'syz.3.450': attribute type 8 has an invalid length.
[  134.976804][ T7605] netlink: 'syz.3.450': attribute type 1 has an invalid length.
[  134.982243][ T7603] netlink: 28 bytes leftover after parsing attributes in process `syz.2.449'.
[  134.985487][ T7605] netlink: 160 bytes leftover after parsing attributes in process `syz.3.450'.
[  135.002773][ T7605] NCSI netlink: No device for ifindex 7388455
[  135.033736][ T7603] netlink: 7060 bytes leftover after parsing attributes in process `syz.2.449'.
[  135.054434][ T7603] netlink: 60 bytes leftover after parsing attributes in process `syz.2.449'.
[  135.420664][ T7618] netlink: 'syz.1.455': attribute type 15 has an invalid length.
[  135.502522][ T7630] netlink: 24 bytes leftover after parsing attributes in process `syz.4.456'.
[  135.566036][ T7632] netlink: 12 bytes leftover after parsing attributes in process `syz.1.457'.
[  135.627120][ T7632] bond1: entered promiscuous mode
[  135.648784][ T7632] 8021q: adding VLAN 0 to HW filter on device bond1
[  135.689480][ T7632] netlink: 12 bytes leftover after parsing attributes in process `syz.1.457'.
[  135.752850][ T7632] 8021q: adding VLAN 0 to HW filter on device bond1
[  135.762864][ T7632] bond1: (slave sit1): The slave device specified does not support setting the MAC address
[  135.774122][ T7632] bond1: (slave sit1): Error -95 calling set_mac_address
[  135.978284][  T105] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50
[  135.986137][  T105] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50
[  136.007910][ T7644] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium
[  136.106931][ T7657] IPVS: set_ctl: invalid protocol: 12 0.0.0.0:20000
[  136.124949][ T7650] workqueue: Failed to create a rescuer kthread for wq "nfc3_nci_cmd_wq": -EINTR
[  136.371480][ T7676] x_tables: ip_tables: HMARK.0 target: invalid size 64 (kernel) != (user) 72
[  136.504378][ T7680] bridge2: trying to set multicast startup query interval above maximum, setting to 8640000 (86400000ms)
[  136.587009][ T7669] netlink: 'syz.3.465': attribute type 4 has an invalid length.
[  136.593692][ T7685] macsec0: left allmulticast mode
[  136.688890][ T7687] netlink: 4 bytes leftover after parsing attributes in process `syz.2.473'.
[  136.779030][ T7693] netlink: 'syz.2.473': attribute type 1 has an invalid length.
[  136.955679][ T7708] netlink: 8 bytes leftover after parsing attributes in process `syz.2.473'.
[  136.967618][ T7710] netlink: 'syz.3.476': attribute type 18 has an invalid length.
[  136.991563][ T7687] 8021q: adding VLAN 0 to HW filter on device bond3
[  137.002391][ T7703] FAULT_INJECTION: forcing a failure.
[  137.002391][ T7703] name fail_usercopy, interval 1, probability 0, space 0, times 0
[  137.018364][ T7703] CPU: 1 UID: 0 PID: 7703 Comm: syz.1.474 Not tainted syzkaller #0 PREEMPT(full) 
[  137.018404][ T7703] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 03/18/2026
[  137.018423][ T7703] Call Trace:
[  137.018429][ T7703]  <TASK>
[  137.018436][ T7703]  dump_stack_lvl+0xe8/0x150
[  137.018475][ T7703]  should_fail_ex+0x412/0x560
[  137.018507][ T7703]  _copy_from_user+0x2d/0xb0
[  137.018528][ T7703]  kstrtouint_from_user+0xd6/0x180
[  137.018549][ T7703]  ? __pfx_kstrtouint_from_user+0x10/0x10
[  137.018583][ T7703]  proc_fail_nth_write+0x8e/0x210
[  137.018608][ T7703]  ? __pfx_proc_fail_nth_write+0x10/0x10
[  137.018638][ T7703]  ? __pfx_proc_fail_nth_write+0x10/0x10
[  137.018664][ T7703]  vfs_write+0x29a/0xb90
[  137.018693][ T7703]  ? __pfx_vfs_write+0x10/0x10
[  137.018714][ T7703]  ? __fget_files+0x2a/0x420
[  137.018735][ T7703]  ? __fget_files+0x3a0/0x420
[  137.018749][ T7703]  ? __fget_files+0x2a/0x420
[  137.018780][ T7703]  ksys_write+0x150/0x270
[  137.018801][ T7703]  ? __pfx_ksys_write+0x10/0x10
[  137.018832][ T7703]  do_syscall_64+0x14d/0xf80
[  137.018849][ T7703]  ? trace_irq_disable+0x3b/0x150
[  137.018864][ T7703]  ? entry_SYSCALL_64_after_hwframe+0x77/0x7f
[  137.018882][ T7703]  ? clear_bhb_loop+0x40/0x90
[  137.018903][ T7703]  entry_SYSCALL_64_after_hwframe+0x77/0x7f
[  137.018920][ T7703] RIP: 0033:0x7f93c735d04e
[  137.018941][ T7703] Code: 08 0f 85 a5 a8 ff ff 49 89 fb 48 89 f0 48 89 d7 48 89 ce 4c 89 c2 4d 89 ca 4c 8b 44 24 08 4c 8b 4c 24 10 4c 89 5c 24 08 0f 05 <c3> 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 80 00 00 00 00 48 83 ec 08
[  137.018955][ T7703] RSP: 002b:00007f93c8269fe8 EFLAGS: 00000246 ORIG_RAX: 0000000000000001
[  137.018979][ T7703] RAX: ffffffffffffffda RBX: 00007f93c826a6c0 RCX: 00007f93c735d04e
[  137.018991][ T7703] RDX: 0000000000000001 RSI: 00007f93c826a0a0 RDI: 000000000000000b
[  137.019002][ T7703] RBP: 00007f93c826a090 R08: 0000000000000000 R09: 0000000000000000
[  137.019012][ T7703] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001
[  137.019022][ T7703] R13: 00007f93c7616218 R14: 00007f93c7616180 R15: 00007ffe358b2a28
[  137.019052][ T7703]  </TASK>
[  137.447523][  T105] netdevsim netdevsim1 netdevsim0: set [0, 0] type 1 family 0 port 8472 - 0
[  137.462552][  T105] netdevsim netdevsim1 netdevsim1: set [0, 0] type 1 family 0 port 8472 - 0
[  137.533356][  T105] netdevsim netdevsim1 netdevsim2: set [0, 0] type 1 family 0 port 8472 - 0
[  137.591266][  T105] netdevsim netdevsim1 netdevsim3: set [0, 0] type 1 family 0 port 8472 - 0
[  137.673861][ T7739] 
@�: renamed from veth0_vlan
[  137.705783][ T7738] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium
[  137.770966][ T7749] bond4: entered promiscuous mode
[  137.781362][ T7749] 8021q: adding VLAN 0 to HW filter on device bond4
[  137.860723][ T7757] 8021q: adding VLAN 0 to HW filter on device bond4
[  137.867899][ T7757] bond4: (slave vcan1): The slave device specified does not support setting the MAC address
[  137.896499][ T7757] bond4: (slave vcan1): Error -95 calling set_mac_address
[  138.006976][ T7755] bond1: option arp_interval: invalid value (18446744073709551615)
[  138.021439][ T7755] bond1: option arp_interval: allowed values 0 - 2147483647
[  138.032595][ T7755] bond1 (unregistering): Released all slaves
[  138.064208][ T7749] tipc: Enabling of bearer <udp:syz2> rejected, failed to enable media
[  138.083594][ T7753] vlan2: entered promiscuous mode
[  138.089359][ T7753] geneve1: entered promiscuous mode
[  138.094929][ T7753] vlan2: entered allmulticast mode
[  138.149377][ T7753] geneve1: entered allmulticast mode
[  138.439484][ T7787] atomic_op ffff88801e6c7198 conn xmit_atomic 0000000000000000
[  138.949918][ T7801] 8021q: adding VLAN 0 to HW filter on device macvlan2
[  139.271984][ T7815] pimreg: entered allmulticast mode
[  139.371120][ T7819] __nla_validate_parse: 10 callbacks suppressed
[  139.371137][ T7819] netlink: 4 bytes leftover after parsing attributes in process `syz.4.504'.
[  139.397102][ T7819] netlink: 4 bytes leftover after parsing attributes in process `syz.4.504'.
[  139.414297][ T7819] A link change request failed with some changes committed already. Interface caif0 may have been left with an inconsistent configuration, please check.
[  139.440230][ T7818] netlink: 8 bytes leftover after parsing attributes in process `syz.4.504'.
[  139.666932][ T5932] IPVS: starting estimator thread 0...
[  139.758573][ T7837] IPVS: using max 26 ests per chain, 62400 per kthread
[  140.194128][ T7854] syzkaller0: entered promiscuous mode
[  140.203589][ T7854] syzkaller0: entered allmulticast mode
[  140.533093][ T7859] syzkaller0: entered promiscuous mode
[  140.541582][ T7859] syzkaller0: entered allmulticast mode
[  140.580587][ T7859] netlink: 12 bytes leftover after parsing attributes in process `syz.2.515'.
[  140.610465][ T7872] openvswitch: netlink: Flow actions may not be safe on all matching packets.
[  140.675912][ T7871] netlink: 'syz.0.520': attribute type 13 has an invalid length.
[  140.685588][ T7864] Cannot find add_set index 1 as target
[  140.801346][ T7878] netlink: 9 bytes leftover after parsing attributes in process `syz.4.523'.
[  140.822712][ T7878] netlink: 9 bytes leftover after parsing attributes in process `syz.4.523'.
[  140.831426][ T7880] Bluetooth: MGMT ver 1.23
[  141.431464][ T7896] xt_hashlimit: size too large, truncated to 1048576
[  141.511202][ T7898] netlink: 12 bytes leftover after parsing attributes in process `syz.1.529'.
[  142.022856][ T7910] netlink: 'syz.3.531': attribute type 4 has an invalid length.
[  142.174196][ T7920] Cannot find del_set index 2 as target
[  142.596403][ T7938] netlink: 14 bytes leftover after parsing attributes in process `syz.1.539'.
[  142.631986][ T7938] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface
[  142.675193][ T7938] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface
[  142.730146][ T7938] bond0 (unregistering): Released all slaves
[  142.866929][ T7952] netlink: 4 bytes leftover after parsing attributes in process `syz.2.544'.
[  142.916605][ T7954] netlink: 'syz.3.543': attribute type 1 has an invalid length.
[  143.026813][ T7954] bond3: entered promiscuous mode
[  143.073352][ T7954] 8021q: adding VLAN 0 to HW filter on device bond3
[  143.141160][ T7969] netlink: 'syz.4.545': attribute type 1 has an invalid length.
[  143.178867][ T7969] netlink: 'syz.4.545': attribute type 2 has an invalid length.
[  143.190012][ T7973] netlink: 8 bytes leftover after parsing attributes in process `syz.1.546'.
[  143.204136][ T7969] netlink: 'syz.4.545': attribute type 1 has an invalid length.
[  143.227709][ T7959] 8021q: adding VLAN 0 to HW filter on device bond3
[  143.228709][ T7969] netlink: 'syz.4.545': attribute type 3 has an invalid length.
[  143.241177][ T7959] bond3: (slave vcan1): The slave device specified does not support setting the MAC address
[  143.253308][ T7959] bond3: (slave vcan1): Setting fail_over_mac to active for active-backup mode
[  143.270336][ T7959] bond3: (slave vcan1): making interface the new active one
[  143.277982][ T7959] vcan1: entered promiscuous mode
[  143.286587][ T7959] bond3: (slave vcan1): Enslaving as an active interface with an up link
[  143.539394][ T7986] 8021q: VLANs not supported on nlmon0
[  143.966676][ T8006] A link change request failed with some changes committed already. Interface team0 may have been left with an inconsistent configuration, please check.
[  144.060947][ T8006] A link change request failed with some changes committed already. Interface team0 may have been left with an inconsistent configuration, please check.
[  144.243976][ T8017] delete_channel: no stack
[  144.465326][ T8035] lo: left allmulticast mode
[  144.467976][ T8037] __nla_validate_parse: 4 callbacks suppressed
[  144.467992][ T8037] netlink: 12 bytes leftover after parsing attributes in process `syz.4.567'.
[  144.473909][ T8035] tunl0: left allmulticast mode
[  144.489350][ T8037] netlink: 8 bytes leftover after parsing attributes in process `syz.4.567'.
[  144.563945][ T8035] gre0: left allmulticast mode
[  144.595248][ T8035] gretap0: left allmulticast mode
[  144.631771][ T8035] erspan0: left allmulticast mode
[  144.650030][ T8035] ip_vti0: left allmulticast mode
[  144.687239][ T8035] ip6_vti0: left allmulticast mode
[  144.710509][ T8035] sit0: left allmulticast mode
[  144.735024][ T8047] netlink: 'syz.0.570': attribute type 1 has an invalid length.
[  144.751861][ T8047] netlink: 'syz.0.570': attribute type 2 has an invalid length.
[  144.752066][ T8035] ip6tnl0: left allmulticast mode
[  144.829945][ T8035] ip6gre0: left allmulticast mode
[  144.837066][ T8035] syz_tun: left allmulticast mode
[  144.846773][ T8035] ip6gretap0: left allmulticast mode
[  144.883831][ T8035] bridge0: left promiscuous mode
[  144.923060][ T8035] bridge0: entered promiscuous mode
[  144.931132][ T8035] vcan0: left allmulticast mode
[  144.937421][ T8035] team0: left allmulticast mode
[  144.944671][ T8035] 8021q: adding VLAN 0 to HW filter on device team0
[  144.955155][ T8035] dummy0: left allmulticast mode
[  144.969436][ T8035] nlmon0: left allmulticast mode
[  144.976270][ T8035] caif0: left allmulticast mode
[  144.982593][ T8035] A link change request failed with some changes committed already. Interface caif0 may have been left with an inconsistent configuration, please check.
[  145.009764][ T8037] A link change request failed with some changes committed already. Interface gre3 may have been left with an inconsistent configuration, please check.
[  145.779490][ T8086] netlink: 20 bytes leftover after parsing attributes in process `syz.1.583'.
[  145.921409][ T8090] openvswitch: netlink: Actions may not be safe on all matching packets
[  145.991807][ T8099] bond0: (slave sit0): refused to change device type
[  146.012430][ T8094] netlink: 8 bytes leftover after parsing attributes in process `syz.0.584'.
[  146.034416][ T8101] netlink: 'syz.2.586': attribute type 21 has an invalid length.
[  146.042067][ T8099] tipc: Failed to remove unknown binding: 66,1,1/0:3269301239/3269301241
[  146.042410][ T8101] netlink: 'syz.2.586': attribute type 20 has an invalid length.
[  146.051392][ T8099] tipc: Failed to remove unknown binding: 66,1,1/0:3269301239/3269301241
[  146.593753][ T8125] bond4: entered allmulticast mode
[  146.674002][ T8128] macvlan2: entered promiscuous mode
[  146.714195][ T8138] netlink: 24 bytes leftover after parsing attributes in process `syz.1.597'.
[  146.723980][ T8128] macvlan2: entered allmulticast mode
[  146.737384][ T8128] bond4: (slave macvlan2): Opening slave failed
[  147.250467][ T8162] netlink: 68 bytes leftover after parsing attributes in process `syz.0.605'.
[  147.527700][ T8182] netlink: 212348 bytes leftover after parsing attributes in process `syz.4.607'.
[  147.609463][ T8168] validate_nla: 1 callbacks suppressed
[  147.609481][ T8168] netlink: 'syz.3.606': attribute type 2 has an invalid length.
[  147.677138][ T8168] netlink: 'syz.3.606': attribute type 2 has an invalid length.
[  147.706424][ T8170] macsec1: entered promiscuous mode
[  148.329685][ T8205] netlink: 24 bytes leftover after parsing attributes in process `syz.2.612'.
[  149.595732][ T8247] netlink: 8 bytes leftover after parsing attributes in process `syz.4.624'.
[  149.924618][ T8259] clip:clip_setentry: non-CLIP VCC
[  150.427389][ T8285] xt_CT: No such helper "syz1"
[  150.550542][ T8283] syzkaller0: entered promiscuous mode
[  150.556084][ T8283] syzkaller0: entered allmulticast mode
[  150.850126][ T8302] batadv0: entered promiscuous mode
[  150.864871][ T8302] batadv0: left promiscuous mode
[  150.974735][ T8307] netlink: 36 bytes leftover after parsing attributes in process `syz.2.640'.
[  151.357329][ T8322] netlink: 'syz.1.642': attribute type 1 has an invalid length.
[  151.557605][ T8322] bond0: entered promiscuous mode
[  151.596755][ T8322] bond0: entered allmulticast mode
[  151.652716][ T8322] 8021q: adding VLAN 0 to HW filter on device bond0
[  151.743261][ T8321] syzkaller1: entered promiscuous mode
[  151.749181][ T8321] syzkaller1: entered allmulticast mode
[  151.771544][ T8327] lo speed is unknown, defaulting to 1000
[  151.780128][ T8327] lo speed is unknown, defaulting to 1000
[  151.790949][ T8327] lo speed is unknown, defaulting to 1000
[  151.803784][ T8327] iwpm_register_pid: Unable to send a nlmsg (client = 2)
[  151.829177][ T8327] infiniband syz2: RDMA CMA: cma_listen_on_dev, error -98
[  151.940176][ T8327] lo speed is unknown, defaulting to 1000
[  151.956502][ T8345] tipc: Started in network mode
[  151.962757][ T8345] tipc: Node identity 8e32759e3dc9, cluster identity 4711
[  151.970860][ T8345] tipc: Enabled bearer <eth:syzkaller0>, priority 0
[  152.170824][ T8345] syzkaller0: entered promiscuous mode
[  152.176765][ T8345] syzkaller0: entered allmulticast mode
[  152.184479][ T8327] lo speed is unknown, defaulting to 1000
[  152.234954][ T8360] tipc: Resetting bearer <eth:syzkaller0>
[  152.245766][ T8327] lo speed is unknown, defaulting to 1000
[  152.266456][ T8344] tipc: Resetting bearer <eth:syzkaller0>
[  152.333384][ T8344] tipc: Disabling bearer <eth:syzkaller0>
[  152.353408][ T8327] lo speed is unknown, defaulting to 1000
[  152.372046][ T8363] macsec0: entered promiscuous mode
[  152.379585][ T8363] macsec0: left promiscuous mode
[  152.446646][ T8327] lo speed is unknown, defaulting to 1000
[  152.470155][ T8327] lo speed is unknown, defaulting to 1000
[  152.482479][ T8327] lo speed is unknown, defaulting to 1000
[  152.512984][ T8367] x_tables: ip_tables: DNAT target: used from hooks POSTROUTING, but only usable from PREROUTING/OUTPUT
[  153.027758][ T8398] netlink: 36 bytes leftover after parsing attributes in process `syz.2.661'.
[  153.180355][ T8403] netlink: 'syz.0.664': attribute type 21 has an invalid length.
[  153.208060][ T8403] netlink: 132 bytes leftover after parsing attributes in process `syz.0.664'.
[  153.229232][ T8403] netlink: 28 bytes leftover after parsing attributes in process `syz.0.664'.
[  153.607486][ T8428] netlink: 24 bytes leftover after parsing attributes in process `syz.4.668'.
[  153.900903][ T8440] xt_TCPMSS: path-MTU clamping only supported in FORWARD, OUTPUT and POSTROUTING hooks
[  154.141115][ T8447] netlink: 1 bytes leftover after parsing attributes in process `syz.2.678'.
[  154.619987][ T8456] ip6t_REJECT: TCP_RESET illegal for non-tcp
[  154.969196][ T8466] netlink: 'syz.4.683': attribute type 1 has an invalid length.
[  155.139465][ T8477] IPVS: set_ctl: invalid protocol: 51 172.20.20.187:20000
[  155.442317][ T8491] netlink: 8 bytes leftover after parsing attributes in process `syz.3.688'.
[  155.599290][ T8498] netlink: 12 bytes leftover after parsing attributes in process `syz.4.690'.
[  155.621325][ T8498] netlink: 12 bytes leftover after parsing attributes in process `syz.4.690'.
[  155.671954][ T8498] netlink: 48 bytes leftover after parsing attributes in process `syz.4.690'.
[  155.905973][ T8509] xt_hashlimit: size too large, truncated to 1048576
[  155.948530][ T8509] xt_hashlimit: max too large, truncated to 1048576
[  155.991766][ T8512] tipc: Started in network mode
[  155.996671][ T8512] tipc: Node identity 4, cluster identity 4711
[  156.004258][ T8512] tipc: Node number set to 4
[  156.165126][ T8522] netlink: 192 bytes leftover after parsing attributes in process `syz.3.698'.
[  156.462449][ T8526] netlink: 12 bytes leftover after parsing attributes in process `syz.2.700'.
[  156.472438][ T8526] netlink: 'syz.2.700': attribute type 13 has an invalid length.
[  156.711134][ T8544] lo speed is unknown, defaulting to 1000
[  157.510088][ T8573] netlink: 'syz.1.713': attribute type 58 has an invalid length.
[  157.575102][ T8573] netlink: 4 bytes leftover after parsing attributes in process `syz.1.713'.
[  157.676778][ T8583] netlink: 4 bytes leftover after parsing attributes in process `syz.3.715'.
[  157.687060][ T8579] netlink: 'syz.4.714': attribute type 1 has an invalid length.
[  157.710084][ T8573] bond2: Invalid ad_actor_system MAC address.
[  157.720932][ T8573] bond2: option ad_actor_system: invalid value (7)
[  157.733541][ T8573] bond2 (unregistering): Released all slaves
[  158.059231][ T8597] geneve2: entered promiscuous mode
[  158.081186][ T8602] netlink: 14 bytes leftover after parsing attributes in process `syz.2.720'.
[  158.106378][ T8597] netlink: 8 bytes leftover after parsing attributes in process `syz.4.718'.
[  158.141188][ T8602] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface
[  158.196313][ T8602] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface
[  158.223940][ T8602] bond0 (unregistering): (slave wlan1): Releasing backup interface
[  158.274324][ T8602] bond0 (unregistering): Released all slaves
[  158.496265][ T8611] netlink: 'syz.3.721': attribute type 14 has an invalid length.
[  158.548916][ T8611] netlink: 'syz.3.721': attribute type 12 has an invalid length.
[  158.627320][ T8611] netlink: 'syz.3.721': attribute type 14 has an invalid length.
[  158.635595][ T3572] netdevsim netdevsim3 netdevsim0: set [0, 0] type 1 family 0 port 8472 - 0
[  158.678346][ T3572] netdevsim netdevsim3 netdevsim1: set [0, 0] type 1 family 0 port 8472 - 0
[  158.707610][ T8611] netlink: 'syz.3.721': attribute type 12 has an invalid length.
[  158.739620][ T3572] netdevsim netdevsim3 netdevsim2: set [0, 0] type 1 family 0 port 8472 - 0
[  158.951619][ T3572] netdevsim netdevsim3 netdevsim3: set [0, 0] type 1 family 0 port 8472 - 0
[  158.987139][ T8639] netlink: 'syz.1.729': attribute type 1 has an invalid length.
[  159.143067][ T8654] tipc: Started in network mode
[  159.148152][ T8654] tipc: Node identity b6ea82b8f339, cluster identity 4711
[  159.155991][ T8654] tipc: Enabled bearer <eth:syzkaller0>, priority 0
[  159.181939][ T8654] syzkaller0: entered promiscuous mode
[  159.187659][ T8654] syzkaller0: entered allmulticast mode
[  159.308084][ T8668] syzkaller0: entered promiscuous mode
[  159.316717][ T8668] syzkaller0: entered allmulticast mode
[  159.396979][ T8667] syzkaller0: entered promiscuous mode
[  159.402866][ T8667] syzkaller0: entered allmulticast mode
[  159.438832][ T8653] tipc: Resetting bearer <eth:syzkaller0>
[  159.467653][ T8653] tipc: Disabling bearer <eth:syzkaller0>
[  159.473984][   T29] audit: type=1800 audit(1775822766.089:2): pid=8680 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed comm="syz.1.738" name="memory.events" dev="tmpfs" ino=821 res=0 errno=0
[  161.090704][ T8717] nft_compat: unsupported protocol 0
[  162.335481][ T8725] bridge4: entered promiscuous mode
[  162.341174][ T8725] bridge4: entered allmulticast mode
[  162.359113][ T8725] team0: Port device bridge4 added
[  162.377427][ T8726] bridge0: port 3(team0) entered blocking state
[  162.408883][ T8726] bridge0: port 3(team0) entered disabled state
[  162.432626][ T8726] team0: entered allmulticast mode
[  162.437792][ T8726] team_slave_0: entered allmulticast mode
[  162.465562][ T8726] team_slave_1: entered allmulticast mode
[  162.475526][ T8726] team0: left allmulticast mode
[  162.480594][ T8726] team_slave_0: left allmulticast mode
[  162.486184][ T8726] team_slave_1: left allmulticast mode
[  162.538116][ T8708] lo speed is unknown, defaulting to 1000
[  162.666763][ T8737] __nla_validate_parse: 6 callbacks suppressed
[  162.666782][ T8737] netlink: 260 bytes leftover after parsing attributes in process `syz.4.754'.
[  163.046589][ T8744] syzkaller0: entered promiscuous mode
[  163.052319][ T8744] syzkaller0: entered allmulticast mode
[  164.916592][ T8803] netlink: 16 bytes leftover after parsing attributes in process `syz.3.775'.
[  164.950378][ T8803] netlink: 12 bytes leftover after parsing attributes in process `syz.3.775'.
[  164.972216][ T8808] netlink: 84 bytes leftover after parsing attributes in process `syz.4.777'.
[  165.152695][ T8821] netlink: 'syz.2.781': attribute type 1 has an invalid length.
[  165.565122][ T8844] netlink: 76 bytes leftover after parsing attributes in process `syz.3.786'.
[  165.608664][ T8844] syzkaller0: entered promiscuous mode
[  165.614177][ T8844] syzkaller0: entered allmulticast mode
[  165.639442][ T8844] tc action pedit offset must be on 32 bit boundaries
[  165.646407][ T8844] tc action pedit offset must be on 32 bit boundaries
[  165.653190][ T8844] tc action pedit offset must be on 32 bit boundaries
[  165.659948][ T8844] tc action pedit offset must be on 32 bit boundaries
[  165.666705][ T8844] tc action pedit offset must be on 32 bit boundaries
[  165.673488][ T8844] tc action pedit offset must be on 32 bit boundaries
[  165.680261][ T8844] tc action pedit offset must be on 32 bit boundaries
[  165.687033][ T8844] tc action pedit offset must be on 32 bit boundaries
[  165.693818][ T8844] tc action pedit offset must be on 32 bit boundaries
[  165.700589][ T8844] tc action pedit offset must be on 32 bit boundaries
[  165.707339][ T8844] 0: reclassify loop, rule prio 0, protocol 800
[  165.946215][ T8863] netlink: 8 bytes leftover after parsing attributes in process `syz.4.792'.
[  166.015843][ T8870] netlink: 24 bytes leftover after parsing attributes in process `syz.3.793'.
[  166.231160][ T8888] netlink: 20 bytes leftover after parsing attributes in process `syz.3.797'.
[  166.333643][ T8895] netlink: 8708 bytes leftover after parsing attributes in process `syz.3.801'.
[  166.356506][ T8895] openvswitch: netlink: Flow key attr not present in new flow.
[  166.367323][ T8895] netlink: 'syz.3.801': attribute type 1 has an invalid length.
[  166.376052][ T8895] netlink: 224 bytes leftover after parsing attributes in process `syz.3.801'.
[  166.541209][ T8909] netlink: 'syz.2.804': attribute type 1 has an invalid length.
[  166.581355][ T8915] netlink: 'syz.3.805': attribute type 1 has an invalid length.
[  166.621265][ T8909] bond0: entered promiscuous mode
[  166.631692][ T8909] 8021q: adding VLAN 0 to HW filter on device bond0
[  166.722925][ T8914] 8021q: adding VLAN 0 to HW filter on device bond5
[  166.802736][ T8930] SET target dimension over the limit!
[  166.829919][ T8921] 8021q: adding VLAN 0 to HW filter on device bond0
[  166.836951][ T8921] bond0: (slave gre1): The slave device specified does not support setting the MAC address
[  166.888298][ T8921] bond0: (slave gre1): Setting fail_over_mac to active for active-backup mode
[  166.904461][ T8921] bond0: (slave gre1): making interface the new active one
[  166.913904][ T8921] gre1: entered promiscuous mode
[  166.921367][ T8921] bond0: (slave gre1): Enslaving as an active interface with an up link
[  167.504920][ T8955] geneve0: Caught tx_queue_len zero misconfig
[  167.798050][ T8974] __nla_validate_parse: 8 callbacks suppressed
[  167.798070][ T8974] netlink: 56 bytes leftover after parsing attributes in process `syz.4.823'.
[  167.813938][ T8974] netlink: 8 bytes leftover after parsing attributes in process `syz.4.823'.
[  168.069640][ T8998] netlink: 68 bytes leftover after parsing attributes in process `syz.0.828'.
[  168.433618][ T9015] netlink: 28 bytes leftover after parsing attributes in process `syz.1.838'.
[  168.541582][ T9015] netlink: 7060 bytes leftover after parsing attributes in process `syz.1.838'.
[  168.765964][ T9033] netlink: 292 bytes leftover after parsing attributes in process `syz.0.844'.
[  168.831619][ T9032] ip6tnl0: Caught tx_queue_len zero misconfig
[  168.865576][ T9032] netlink: 24 bytes leftover after parsing attributes in process `syz.0.844'.
[  169.241280][ T9069] netlink: 'syz.3.854': attribute type 8 has an invalid length.
[  169.256441][ T9069] netlink: 4 bytes leftover after parsing attributes in process `syz.3.854'.
[  169.284900][ T9069] bond0: entered promiscuous mode
[  169.294858][ T9069] gretap0: entered promiscuous mode
[  169.314685][ T9069] hsr1: entered promiscuous mode
[  169.359480][ T9074] netlink: 76 bytes leftover after parsing attributes in process `syz.1.855'.
[  169.370282][ T9074] netlink: 8 bytes leftover after parsing attributes in process `syz.1.855'.
[  169.419900][ T9078] netlink: 'syz.0.858': attribute type 9 has an invalid length.
[  169.584140][ T9095] FAULT_INJECTION: forcing a failure.
[  169.584140][ T9095] name fail_usercopy, interval 1, probability 0, space 0, times 0
[  169.618627][ T9095] CPU: 1 UID: 0 PID: 9095 Comm: syz.2.862 Not tainted syzkaller #0 PREEMPT(full) 
[  169.618652][ T9095] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 03/18/2026
[  169.618662][ T9095] Call Trace:
[  169.618670][ T9095]  <TASK>
[  169.618677][ T9095]  dump_stack_lvl+0xe8/0x150
[  169.618707][ T9095]  should_fail_ex+0x412/0x560
[  169.618737][ T9095]  _copy_to_user+0x31/0xb0
[  169.618759][ T9095]  simple_read_from_buffer+0xe1/0x170
[  169.618786][ T9095]  proc_fail_nth_read+0x1bb/0x230
[  169.618810][ T9095]  ? __pfx_proc_fail_nth_read+0x10/0x10
[  169.618836][ T9095]  ? rw_verify_area+0x2a6/0x4d0
[  169.618853][ T9095]  ? tun_chr_write_iter+0x18a/0x200
[  169.618872][ T9095]  ? __pfx_proc_fail_nth_read+0x10/0x10
[  169.618898][ T9095]  vfs_read+0x20c/0xa70
[  169.618914][ T9095]  ? fdget_pos+0x246/0x320
[  169.618935][ T9095]  ? __pfx___mutex_lock+0x10/0x10
[  169.618954][ T9095]  ? __pfx_vfs_read+0x10/0x10
[  169.618973][ T9095]  ? __fget_files+0x2a/0x420
[  169.618992][ T9095]  ? __fget_files+0x3a0/0x420
[  169.619007][ T9095]  ? __fget_files+0x2a/0x420
[  169.619030][ T9095]  ksys_read+0x150/0x270
[  169.619052][ T9095]  ? __pfx_ksys_read+0x10/0x10
[  169.619080][ T9095]  do_syscall_64+0x14d/0xf80
[  169.619096][ T9095]  ? trace_irq_disable+0x3b/0x150
[  169.619111][ T9095]  ? entry_SYSCALL_64_after_hwframe+0x77/0x7f
[  169.619127][ T9095]  ? clear_bhb_loop+0x40/0x90
[  169.619147][ T9095]  entry_SYSCALL_64_after_hwframe+0x77/0x7f
[  169.619164][ T9095] RIP: 0033:0x7f68cbb5d04e
[  169.619180][ T9095] Code: 08 0f 85 a5 a8 ff ff 49 89 fb 48 89 f0 48 89 d7 48 89 ce 4c 89 c2 4d 89 ca 4c 8b 44 24 08 4c 8b 4c 24 10 4c 89 5c 24 08 0f 05 <c3> 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 80 00 00 00 00 48 83 ec 08
[  169.619195][ T9095] RSP: 002b:00007f68cca5ffe8 EFLAGS: 00000246 ORIG_RAX: 0000000000000000
[  169.619214][ T9095] RAX: ffffffffffffffda RBX: 00007f68cca606c0 RCX: 00007f68cbb5d04e
[  169.619226][ T9095] RDX: 000000000000000f RSI: 00007f68cca600a0 RDI: 0000000000000003
[  169.619236][ T9095] RBP: 00007f68cca60090 R08: 0000000000000000 R09: 0000000000000000
[  169.619246][ T9095] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001
[  169.619256][ T9095] R13: 00007f68cbe16038 R14: 00007f68cbe15fa0 R15: 00007ffc7294a8f8
[  169.619284][ T9095]  </TASK>
[  170.398706][ T9127] syzkaller0: entered promiscuous mode
[  170.429563][ T9127] syzkaller0: entered allmulticast mode
[  170.600945][ T9148] netlink: 'syz.0.873': attribute type 8 has an invalid length.
[  171.101044][ T9161] lo speed is unknown, defaulting to 1000
[  172.361624][ T9237] syzkaller1: tun_chr_ioctl cmd 1074025677
[  172.382682][ T9237] syzkaller1: linktype set to 825
[  172.597425][ T9241] lo speed is unknown, defaulting to 1000
[  172.617582][ T9256] ip6_tunnel: non-ECT from fc02:0000:0000:0000:0000:0000:0000:0000 with DS=0x6
[  172.823205][ T9272] netlink: 'syz.3.901': attribute type 1 has an invalid length.
[  172.842422][ T9272] __nla_validate_parse: 7 callbacks suppressed
[  172.842438][ T9272] netlink: 12 bytes leftover after parsing attributes in process `syz.3.901'.
[  172.888100][ T9268] netlink: 28 bytes leftover after parsing attributes in process `syz.4.900'.
[  172.936001][ T9273] lo speed is unknown, defaulting to 1000
[  173.235225][ T9292] netlink: 212408 bytes leftover after parsing attributes in process `syz.1.904'.
[  173.326804][ T9297] netlink: 8 bytes leftover after parsing attributes in process `syz.3.906'.
[  173.345513][ T9297] macvlan2: entered promiscuous mode
[  173.351591][ T9297] macvlan2: entered allmulticast mode
[  173.356997][ T9297] veth1_to_batadv: entered allmulticast mode
[  173.619962][ T9263] mpoa:mpoad_close: (<unknown>) going down
[  173.623981][ T9313] netlink: 332 bytes leftover after parsing attributes in process `syz.4.909'.
[  173.661187][ T9313] netlink: 'syz.4.909': attribute type 9 has an invalid length.
[  173.698540][ T9313] netlink: 100 bytes leftover after parsing attributes in process `syz.4.909'.
[  173.707527][ T9313] netlink: 32 bytes leftover after parsing attributes in process `syz.4.909'.
[  173.815458][ T9313] xt_hashlimit: size too large, truncated to 1048576
[  173.930948][ T9323] netlink: 156 bytes leftover after parsing attributes in process `syz.3.913'.
[  174.285767][ T9344] netlink: 4 bytes leftover after parsing attributes in process `syz.2.917'.
[  174.410118][ T9346] netlink: 12 bytes leftover after parsing attributes in process `syz.4.919'.
[  174.609427][ T3572] netdevsim netdevsim0 eth0: unset [0, 0] type 1 family 0 port 8472 - 0
[  174.617961][ T3572] netdevsim netdevsim0 eth1: unset [0, 0] type 1 family 0 port 8472 - 0
[  174.651220][ T3572] netdevsim netdevsim0 eth2: unset [0, 0] type 1 family 0 port 8472 - 0
[  174.684369][ T3572] netdevsim netdevsim0 eth3: unset [0, 0] type 1 family 0 port 8472 - 0
[  174.699649][ T9326] af_packet: tpacket_rcv: packet too big, clamped from 1 to 4294967272. macoff=96
[  174.880500][ T9369] netlink: 'syz.2.927': attribute type 1 has an invalid length.
[  174.966319][ T9369] bond5: entered promiscuous mode
[  174.973135][ T9369] 8021q: adding VLAN 0 to HW filter on device bond5
[  175.031227][ T9369] 8021q: adding VLAN 0 to HW filter on device bond5
[  175.052424][ T9369] bond5: (slave vcan1): The slave device specified does not support setting the MAC address
[  175.113430][ T9369] bond5: (slave vcan1): Setting fail_over_mac to active for active-backup mode
[  175.157637][ T9369] bond5: (slave vcan1): making interface the new active one
[  175.165239][ T9369] vcan1: entered promiscuous mode
[  175.177618][ T9369] bond5: (slave vcan1): Enslaving as an active interface with an up link
[  175.218699][ T9384] syzkaller0: entered promiscuous mode
[  175.238565][ T9384] syzkaller0: entered allmulticast mode
[  175.540373][ T9402] syzkaller0: entered promiscuous mode
[  175.547040][ T9402] syzkaller0: entered allmulticast mode
[  175.557493][ T9393] xt_hashlimit: max too large, truncated to 1048576
[  175.574202][ T9402] netlink: 'syz.4.936': attribute type 5 has an invalid length.
[  175.580765][ T9393] xt_hashlimit: overflow, try lower: 2/0
[  175.675940][ T9409] lo speed is unknown, defaulting to 1000
[  175.696887][ T9415] netlink: 'syz.3.939': attribute type 1 has an invalid length.
[  175.714427][ T9415] netlink: 'syz.3.939': attribute type 3 has an invalid length.
[  175.724635][ T9415] NCSI netlink: No device for ifindex 813332851
[  175.797410][ T9419] netlink: 'syz.4.941': attribute type 2 has an invalid length.
[  175.807369][ T9419] netlink: 'syz.4.941': attribute type 2 has an invalid length.
[  175.820046][ T9419] netlink: Conntrack attr type has unexpected length (type=2, length=0, expected=2)
[  175.820151][ T9412] lo speed is unknown, defaulting to 1000
[  176.220746][ T9437] syzkaller0: entered promiscuous mode
[  176.223010][ T9429] Bluetooth: MGMT ver 1.23
[  176.233278][ T9437] syzkaller0: entered allmulticast mode
[  176.335888][ T9433] tipc: Started in network mode
[  176.352027][ T9433] tipc: Node identity da4545dc9441, cluster identity 4711
[  176.360222][ T9433] tipc: Enabled bearer <eth:syzkaller0>, priority 0
[  176.391268][ T9436] lo speed is unknown, defaulting to 1000
[  176.433773][ T9432] tipc: Resetting bearer <eth:syzkaller0>
[  176.510178][ T9432] tipc: Disabling bearer <eth:syzkaller0>
[  176.571129][ T9443] netlink: 'syz.2.947': attribute type 1 has an invalid length.
[  176.734154][ T9443] 8021q: adding VLAN 0 to HW filter on device bond6
[  176.905031][ T9453] netlink: zone id is out of range
[  176.929941][ T9453] netlink: zone id is out of range
[  176.954429][ T9453] netlink: zone id is out of range
[  176.967428][ T9453] netlink: zone id is out of range
[  176.972943][ T9453] netlink: zone id is out of range
[  176.980371][ T9453] netlink: zone id is out of range
[  176.985715][ T9453] netlink: zone id is out of range
[  176.991678][ T9453] netlink: zone id is out of range
[  177.076302][ T9469] vlan3: entered promiscuous mode
[  177.352982][ T9467] netlink: 'syz.0.951': attribute type 3 has an invalid length.
[  177.554052][ T9494] syzkaller1: tun_chr_ioctl cmd 1074025677
[  177.560388][ T9494] syzkaller1: linktype set to 825
[  177.700932][ T9501] x_tables: ip6_tables: TCPMSS target: only valid for protocol 6
[  177.828898][ T9512] netlink: 'syz.4.965': attribute type 1 has an invalid length.
[  177.912878][ T9519] macsec0: entered promiscuous mode
[  178.054567][ T9527] net_ratelimit: 9 callbacks suppressed
[  178.054588][ T9527] ICMPv6: Received fragmented ndisc packet. Carefully consider disabling suppress_frag_ndisc.
[  178.142993][ T9530] __nla_validate_parse: 12 callbacks suppressed
[  178.143006][ T9530] netlink: 40 bytes leftover after parsing attributes in process `syz.4.968'.
[  178.458124][ T9534] netlink: 4 bytes leftover after parsing attributes in process `syz.2.971'.
[  178.953180][ T9550] netlink: 'syz.4.974': attribute type 4 has an invalid length.
[  178.962129][ T9550] mac80211_hwsim hwsim11 wlan1: entered promiscuous mode
[  178.971437][ T9550] bond0: entered promiscuous mode
[  179.774769][ T9549] bond0: left promiscuous mode
[  179.780831][ T9549] mac80211_hwsim hwsim11 wlan1: left promiscuous mode
[  179.843373][ T9480] nci: __nci_request: wait_for_completion_interruptible_timeout failed -512
[  180.183872][ T9574] xt_CT: You must specify a L4 protocol and not use inversions on it
[  180.205751][ T9576] netlink: 8 bytes leftover after parsing attributes in process `syz.3.982'.
[  180.254248][ T9580] netlink: 8 bytes leftover after parsing attributes in process `syz.1.981'.
[  180.381986][ T9589] netlink: 128 bytes leftover after parsing attributes in process `syz.3.985'.
[  180.473885][ T9589] netlink: 48 bytes leftover after parsing attributes in process `syz.3.985'.
[  180.553486][ T9593] syzkaller0: entered promiscuous mode
[  180.559571][ T9593] syzkaller0: entered allmulticast mode
[  180.596814][ T9597] netlink: 52 bytes leftover after parsing attributes in process `syz.2.989'.
[  180.688489][ T9606] nci: __nci_request: wait_for_completion_interruptible_timeout failed -512
[  180.717174][ T9614] netlink: 36 bytes leftover after parsing attributes in process `syz.4.993'.
[  180.720692][ T9602] nci: __nci_request: wait_for_completion_interruptible_timeout failed -512
[  180.825325][ T9623] xt_physdev: --physdev-out and --physdev-is-out only supported in the FORWARD and POSTROUTING chains with bridged traffic
[  180.894984][ T9623] macvtap0: entered promiscuous mode
[  180.916018][ T9623] macvtap0: entered allmulticast mode
[  180.932959][ T9623] veth0_macvtap: entered allmulticast mode
[  181.176282][ T9637] lo speed is unknown, defaulting to 1000
[  181.316228][ T9634] dvmrp0: entered allmulticast mode
[  181.673098][ T9672] netlink: 8 bytes leftover after parsing attributes in process `syz.4.1006'.
[  181.704378][ T9672] netlink: 4 bytes leftover after parsing attributes in process `syz.4.1006'.
[  182.092166][ T9691] block nbd0: not configured, cannot reconfigure
[  182.108710][ T9693] veth0_virt_wifi: Caught tx_queue_len zero misconfig
[  182.115876][ T9693] netem: incorrect ge model size
[  182.141049][ T9693] netem: change failed
[  182.171273][ T9691] tipc: Enabled bearer <udp:syz>, priority 6
[  182.218096][ T9694] syzkaller0: entered promiscuous mode
[  182.228369][ T9694] syzkaller0: entered allmulticast mode
[  182.832932][ T9722] syzkaller0: entered promiscuous mode
[  182.842156][ T9722] syzkaller0: entered allmulticast mode
[  182.863233][ T9722] IPVS: Unknown mcast interface: pim6reg1
[  182.995736][ T9729] batadv_slave_0: entered promiscuous mode
[  183.390002][ T9743] __nla_validate_parse: 3 callbacks suppressed
[  183.390020][ T9743] netlink: 24 bytes leftover after parsing attributes in process `syz.2.1032'.
[  183.660871][ T9758] netlink: 12 bytes leftover after parsing attributes in process `syz.2.1037'.
[  183.825401][ T9765] netlink: 'syz.0.1039': attribute type 1 has an invalid length.
[  183.897837][ T9765] 8021q: adding VLAN 0 to HW filter on device bond1
[  183.954260][ T9767] bond1: entered allmulticast mode
[  184.015261][ T9765] bond1: (slave ip6gretap1): making interface the new active one
[  184.037141][ T9765] ip6gretap1: entered allmulticast mode
[  184.044671][ T9765] bond1: (slave ip6gretap1): Enslaving as an active interface with an up link
[  184.303270][ T9779] netlink: 'syz.0.1043': attribute type 16 has an invalid length.
[  184.314889][ T9779] netlink: 'syz.0.1043': attribute type 17 has an invalid length.
[  185.279115][ T9840] syzkaller1: entered promiscuous mode
[  185.284634][ T9840] syzkaller1: entered allmulticast mode
[  185.499256][ T9856] netlink: 68 bytes leftover after parsing attributes in process `syz.1.1061'.
[  185.729662][ T9863] sctp: [Deprecated]: syz.1.1063 (pid 9863) Use of int in maxseg socket option.
[  185.729662][ T9863] Use struct sctp_assoc_value instead
[  186.078953][ T9882] syzkaller0: entered allmulticast mode
[  186.097858][ T9885] syzkaller0: entered promiscuous mode
[  186.150513][ T9901] netlink: 'syz.3.1071': attribute type 2 has an invalid length.
[  186.157602][ T9904] netlink: 'syz.3.1071': attribute type 2 has an invalid length.
[  186.188128][ T9880] syzkaller0: left promiscuous mode
[  186.194660][ T9904] !��: left promiscuous mode
[  186.238620][ T9880] syzkaller0: left allmulticast mode
[  186.414638][ T9917] netlink: 28 bytes leftover after parsing attributes in process `syz.3.1074'.
[  186.421996][ T9919] netlink: 12 bytes leftover after parsing attributes in process `syz.1.1075'.
[  186.474736][ T9917] netlink: 7 bytes leftover after parsing attributes in process `syz.3.1074'.
[  186.494434][ T9917] netlink: 28 bytes leftover after parsing attributes in process `syz.3.1074'.
[  186.519438][ T9917] netlink: 28 bytes leftover after parsing attributes in process `syz.3.1074'.
[  186.776087][ T9935] openvswitch: netlink: VXLAN extension 307 out of range max 1
[  186.821985][ T9936] gretap1: entered promiscuous mode
[  186.857066][ T9936] batman_adv: batadv0: Adding interface: gretap1
[  186.899079][ T9936] batman_adv: batadv0: The MTU of interface gretap1 is too small (1462) to handle the transport of batman-adv packets. If you experience problems getting traffic through try increasing the MTU to 1532.
[  186.967641][ T9936] batman_adv: batadv0: Not using interface gretap1 (retrying later): interface not active
[  187.447410][ T9950] netlink: 40 bytes leftover after parsing attributes in process `syz.4.1082'.
[  187.909609][ T9966] netlink: 'syz.1.1084': attribute type 2 has an invalid length.
[  187.928058][ T9970] netlink: 84 bytes leftover after parsing attributes in process `syz.4.1085'.
[  187.990248][ T9966] !: entered promiscuous mode
[  188.549753][ T9997] netlink: 8 bytes leftover after parsing attributes in process `syz.3.1091'.
[  188.636898][ T9998] netlink: 12 bytes leftover after parsing attributes in process `syz.2.1092'.
[  188.808991][T10000] x_tables: ip_tables: icmp match: only valid for protocol 1
[  188.992565][T10009] syzkaller1: entered promiscuous mode
[  189.007007][T10009] syzkaller1: entered allmulticast mode
[  189.500184][T10024] lo speed is unknown, defaulting to 1000
[  189.832445][T10029] netlink: 'syz.4.1101': attribute type 13 has an invalid length.
[  190.184997][T10040] netlink: 8 bytes leftover after parsing attributes in process `syz.1.1104'.
[  190.212151][T10025] netlink: 8 bytes leftover after parsing attributes in process `syz.3.1100'.
[  190.986270][T10029] veth0_macvtap: left allmulticast mode
[  191.412766][T10076] netlink: 4 bytes leftover after parsing attributes in process `syz.2.1112'.
[  191.511306][   T59] netdevsim netdevsim4 eth0: unset [1, 0] type 2 family 0 port 6081 - 0
[  191.522699][   T59] netdevsim netdevsim4 eth1: unset [1, 0] type 2 family 0 port 6081 - 0
[  191.538809][T10069] netlink: 8 bytes leftover after parsing attributes in process `syz.4.1110'.
[  191.539903][T10075] workqueue: Failed to create a rescuer kthread for wq "bond7": -EINTR
[  191.727463][   T59] netdevsim netdevsim4 eth2: unset [1, 0] type 2 family 0 port 6081 - 0
[  191.766848][   T59] netdevsim netdevsim4 eth3: unset [1, 0] type 2 family 0 port 6081 - 0
[  191.823766][   T59] netdevsim netdevsim1 netdevsim0: unset [0, 0] type 1 family 0 port 8472 - 0
[  191.906863][   T59] netdevsim netdevsim1 netdevsim1: unset [0, 0] type 1 family 0 port 8472 - 0
[  191.930652][   T59] netdevsim netdevsim1 netdevsim2: unset [0, 0] type 1 family 0 port 8472 - 0
[  191.950147][T10103] A link change request failed with some changes committed already. Interface lo may have been left with an inconsistent configuration, please check.
[  192.018080][T10103] IPv6: sit1: Disabled Multicast RS
[  192.047824][T10108] netlink: 68 bytes leftover after parsing attributes in process `syz.1.1119'.
[  192.070333][   T59] netdevsim netdevsim1 netdevsim3: unset [0, 0] type 1 family 0 port 8472 - 0
[  192.169731][T10114] netlink: 48 bytes leftover after parsing attributes in process `syz.0.1120'.
[  192.268474][T10120] netlink: 16 bytes leftover after parsing attributes in process `syz.4.1122'.
[  192.366279][T10131] tunl0: Caught tx_queue_len zero misconfig
[  192.388425][T10131] netlink: 8 bytes leftover after parsing attributes in process `syz.0.1125'.
[  193.003431][T10156] geneve2: entered promiscuous mode
[  193.010532][ T3506] netdevsim netdevsim0 eth0: set [1, 0] type 2 family 0 port 6081 - 0
[  193.028491][   T59] netdevsim netdevsim0 eth1: set [1, 0] type 2 family 0 port 6081 - 0
[  193.042172][T10159] netlink: 'syz.2.1133': attribute type 2 has an invalid length.
[  193.059124][   T59] netdevsim netdevsim0 eth2: set [1, 0] type 2 family 0 port 6081 - 0
[  193.076557][   T59] netdevsim netdevsim0 eth3: set [1, 0] type 2 family 0 port 6081 - 0
[  193.216516][T10166] netlink: 'syz.0.1136': attribute type 2 has an invalid length.
[  193.266935][T10166] netlink: 'syz.0.1136': attribute type 21 has an invalid length.
[  193.617017][T10182] netdevsim netdevsim0 eth3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[  193.709626][T10182] netdevsim netdevsim0 eth2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[  193.823970][T10182] netdevsim netdevsim0 eth1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[  193.909852][T10182] netdevsim netdevsim0 eth0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[  194.037651][T10195] __nla_validate_parse: 6 callbacks suppressed
[  194.037669][T10195] netlink: 16 bytes leftover after parsing attributes in process `syz.2.1145'.
[  194.062984][   T59] netdevsim netdevsim0 eth0: set [1, 0] type 2 family 0 port 6081 - 0
[  194.120228][   T59] netdevsim netdevsim0 eth1: set [1, 0] type 2 family 0 port 6081 - 0
[  194.156447][   T59] netdevsim netdevsim0 eth2: set [1, 0] type 2 family 0 port 6081 - 0
[  194.212275][   T59] netdevsim netdevsim0 eth3: set [1, 0] type 2 family 0 port 6081 - 0
[  194.452765][T10207] netlink: 16 bytes leftover after parsing attributes in process `syz.2.1149'.
[  194.668028][T10225] netlink: 'syz.4.1154': attribute type 39 has an invalid length.
[  194.927835][T10238] netlink: 24 bytes leftover after parsing attributes in process `syz.1.1160'.
[  194.974652][T10242] lo: Caught tx_queue_len zero misconfig
[  195.143187][T10255] tipc: Enabled bearer <eth:syzkaller0>, priority 0
[  195.151839][T10255] syzkaller0: entered promiscuous mode
[  195.157413][T10255] syzkaller0: entered allmulticast mode
[  195.163568][T10258] netlink: 220 bytes leftover after parsing attributes in process `syz.3.1162'.
[  195.278838][T10262] netlink: 44 bytes leftover after parsing attributes in process `syz.1.1166'.
[  195.458226][T10270] netlink: 8 bytes leftover after parsing attributes in process `syz.3.1170'.
[  195.483333][T10270] netlink: 44 bytes leftover after parsing attributes in process `syz.3.1170'.
[  195.535330][T10275] RDS: rds_bind could not find a transport for fe88::3, load rds_tcp or rds_rdma?
[  195.549977][T10268] bond2: option primary: mode dependency failed, not supported in mode balance-rr(0)
[  195.649283][T10268] bond2 (unregistering): Released all slaves
[  195.682621][T10278] openvswitch: netlink: Unknown VXLAN extension attribute 0
[  195.818798][T10284] netlink: 104 bytes leftover after parsing attributes in process `syz.4.1174'.
[  195.969182][T10288] geneve1: entered promiscuous mode
[  195.974555][T10288] geneve1: entered allmulticast mode
[  196.081446][T10295] syzkaller0: entered promiscuous mode
[  196.089537][T10295] 0: reclassify loop, rule prio 0, protocol 800
[  196.250885][T10201] Bluetooth: hci0: command 0x0406 tx timeout
[  196.257037][T10201] Bluetooth: hci2: command 0x0401 tx timeout
[  196.258757][ T5826] Bluetooth: hci1: command 0x0406 tx timeout
[  196.266177][T10201] Bluetooth: hci3: command 0x0406 tx timeout
[  196.378076][ T7523] tipc: Node number set to 1308902876
[  196.412603][T10316] netlink: 12 bytes leftover after parsing attributes in process `syz.0.1185'.
[  196.570648][T10325] netlink: 16 bytes leftover after parsing attributes in process `syz.0.1188'.
[  196.596376][T10323] batman_adv: batadv0: Adding interface: dummy0
[  196.623504][T10323] batman_adv: batadv0: The MTU of interface dummy0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem.
[  196.653726][T10323] batman_adv: batadv0: Not using interface dummy0 (retrying later): interface not active
[  196.869187][T10342] dummy0: entered allmulticast mode
[  196.965370][T10341] dummy0: left allmulticast mode
[  196.998852][T10344] lo speed is unknown, defaulting to 1000
[  197.110337][T10354] netlink: 'syz.1.1198': attribute type 4 has an invalid length.
[  197.556244][T10375] lo speed is unknown, defaulting to 1000
[  197.653901][T10381] netlink: 'syz.1.1205': attribute type 1 has an invalid length.
[  197.899888][T10381] bond2: entered promiscuous mode
[  197.926776][T10381] 8021q: adding VLAN 0 to HW filter on device bond2
[  198.031955][T10381] bond2: (slave veth9): making interface the new active one
[  198.043090][T10381] veth9: entered promiscuous mode
[  198.050156][T10381] bond2: (slave veth9): Enslaving as an active interface with an up link
[  198.152427][T10404] block nbd0: Unsupported socket: should be TCP or UNIX.
[  198.189104][T10406] Freezing with imperfect legacy cgroup freezer. See cgroup.freeze of cgroup v2
[  198.410816][T10411] bridge0: left promiscuous mode
[  198.427411][T10411] bridge0: entered promiscuous mode
[  198.442439][T10411] 8021q: adding VLAN 0 to HW filter on device team0
[  198.504829][T10411] A link change request failed with some changes committed already. Interface caif0 may have been left with an inconsistent configuration, please check.
[  198.582239][T10412] A link change request failed with some changes committed already. Interface caif0 may have been left with an inconsistent configuration, please check.
[  198.664172][T10425] syzkaller1: entered promiscuous mode
[  198.673746][T10438] netlink: 'syz.4.1219': attribute type 1 has an invalid length.
[  198.683263][T10425] syzkaller1: entered allmulticast mode
[  198.771912][T10438] 8021q: adding VLAN 0 to HW filter on device bond1
[  198.775749][T10446] block nbd1: not configured, cannot reconfigure
[  198.944826][T10444] bond1: (slave geneve3): making interface the new active one
[  198.955579][T10444] bond1: (slave geneve3): Enslaving as an active interface with an up link
[  198.975518][   T35] netdevsim netdevsim4 eth0: set [1, 0] type 2 family 0 port 20004 - 0
[  199.017777][   T35] netdevsim netdevsim4 eth1: set [1, 0] type 2 family 0 port 20004 - 0
[  199.060971][   T35] netdevsim netdevsim4 eth2: set [1, 0] type 2 family 0 port 20004 - 0
[  199.113106][   T35] netdevsim netdevsim4 eth3: set [1, 0] type 2 family 0 port 20004 - 0
[  199.131908][T10464] __nla_validate_parse: 6 callbacks suppressed
[  199.131928][T10464] netlink: 4 bytes leftover after parsing attributes in process `syz.4.1226'.
[  199.247661][T10468] netlink: 'syz.3.1228': attribute type 11 has an invalid length.
[  199.458818][T10476] syzkaller0: entered promiscuous mode
[  199.471774][T10476] syzkaller0: entered allmulticast mode
[  199.802529][T10487] lo speed is unknown, defaulting to 1000
[  199.868896][T10491] bridge5: entered allmulticast mode
[  199.898606][T10494] block nbd0: not configured, cannot reconfigure
[  199.950040][T10464] netlink: 4 bytes leftover after parsing attributes in process `syz.4.1226'.
[  200.172595][T10493] "syz.3.1235" (10493) uses obsolete ecb(arc4) skcipher
[  200.213823][T10508] netlink: 16 bytes leftover after parsing attributes in process `syz.2.1236'.
[  200.714685][T10532] netlink: 4 bytes leftover after parsing attributes in process `syz.4.1242'.
[  200.849091][T10553] netlink: 4 bytes leftover after parsing attributes in process `syz.4.1242'.
[  200.948584][T10532] openvswitch: netlink: Flow actions attr not present in new flow.
[  200.958541][T10553] openvswitch: netlink: Flow actions attr not present in new flow.
[  201.201496][T10559] netlink: 'syz.1.1244': attribute type 1 has an invalid length.
[  201.303611][T10559] 8021q: adding VLAN 0 to HW filter on device bond3
[  201.312371][T10569] netlink: 'syz.3.1246': attribute type 3 has an invalid length.
[  201.426758][T10569] dvmrp0: left allmulticast mode
[  201.509197][T10573] infiniband syz0: RDMA CMA: cma_listen_on_dev, error -98
[  201.766326][T10569] syz_tun: left allmulticast mode
[  201.793013][T10569] team0: left promiscuous mode
[  201.799778][T10569] 8021q: adding VLAN 0 to HW filter on device team0
[  201.828715][T10569] A link change request failed with some changes committed already. Interface caif0 may have been left with an inconsistent configuration, please check.
[  202.069433][ T5880] lo speed is unknown, defaulting to 1000
[  202.078788][ T5880] syz2: Port: 1 Link ACTIVE
[  202.476486][T10607] Cannot find map_set index 2 as target
[  202.486796][T10602] bond7: option active_slave: mode dependency failed, not supported in mode balance-rr(0)
[  202.540122][T10602] bond7 (unregistering): Released all slaves
[  202.908098][T10623] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium
[  202.958501][T10623] netlink: 'syz.1.1257': attribute type 10 has an invalid length.
[  202.998332][T10623] mac80211_hwsim hwsim7 wlan1: left allmulticast mode
[  203.052995][T10623] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium
[  203.167174][T10632] bond2: entered promiscuous mode
[  203.230566][T10632] 8021q: adding VLAN 0 to HW filter on device bond2
[  203.542086][T10651] erspan0: entered promiscuous mode
[  203.770391][T10670] netlink: 'syz.3.1274': attribute type 2 has an invalid length.
[  203.808970][T10669] netlink: 'syz.1.1273': attribute type 11 has an invalid length.
[  203.823738][T10665] netlink: 'syz.3.1274': attribute type 2 has an invalid length.
[  203.853537][T10670] !��9: entered promiscuous mode
[  203.911751][T10665] !��9: left promiscuous mode
[  204.041492][T10670] lo speed is unknown, defaulting to 1000
[  204.051697][T10690] netlink: 8 bytes leftover after parsing attributes in process `syz.2.1278'.
[  204.115388][T10695] netlink: 'syz.2.1278': attribute type 1 has an invalid length.
[  204.423140][T10705] netlink: 20 bytes leftover after parsing attributes in process `syz.1.1283'.
[  204.500025][T10705] sit0: Caught tx_queue_len zero misconfig
[  204.505938][T10705] netlink: 16 bytes leftover after parsing attributes in process `syz.1.1283'.
[  204.758899][T10709] netlink: 28 bytes leftover after parsing attributes in process `syz.1.1287'.
[  204.798848][T10717] lo speed is unknown, defaulting to 1000
[  206.266482][T10799] netlink: 8 bytes leftover after parsing attributes in process `syz.3.1307'.
[  206.285086][T10799] gtp0: entered promiscuous mode
[  206.290358][T10799] gtp0: entered allmulticast mode
[  206.677382][T10808] lo speed is unknown, defaulting to 1000
[  207.763167][T10846] netlink: 40 bytes leftover after parsing attributes in process `syz.0.1318'.
[  207.802058][T10846] netlink: 40 bytes leftover after parsing attributes in process `syz.0.1318'.
[  207.878581][T10846] netlink: 40 bytes leftover after parsing attributes in process `syz.0.1318'.
[  207.982877][T10858] netlink: 16186 bytes leftover after parsing attributes in process `syz.4.1322'.
[  208.238947][T10865] A link change request failed with some changes committed already. Interface gre2 may have been left with an inconsistent configuration, please check.
[  208.551123][T10892] pim6reg1: entered promiscuous mode
[  208.556518][T10892] pim6reg1: entered allmulticast mode
[  208.868147][T10908] bridge0: port 3(syz_tun) entered blocking state
[  208.899690][T10908] bridge0: port 3(syz_tun) entered disabled state
[  208.924072][T10908] syz_tun: entered allmulticast mode
[  208.969699][T10915] netlink: 24 bytes leftover after parsing attributes in process `syz.2.1333'.
[  208.998709][T10908] syz_tun: entered promiscuous mode
[  209.403058][T10935] tipc: Enabling of bearer <eth:syzkaller0> rejected, failed to enable media
[  210.288585][T10959] pim6reg: entered allmulticast mode
[  210.296491][T10974] netlink: 132 bytes leftover after parsing attributes in process `syz.2.1344'.
[  210.349099][T10977] ==================================================================
[  210.357246][T10977] BUG: KASAN: slab-out-of-bounds in af_alg_pull_tsgl+0x1c6/0x740
[  210.365076][T10977] Read of size 8 at addr ffff888031bd8ee0 by task syz.3.1343/10977
[  210.367403][T10967] pim6reg: left allmulticast mode
[  210.373381][T10977] 
[  210.373402][T10977] CPU: 0 UID: 0 PID: 10977 Comm: syz.3.1343 Not tainted syzkaller #0 PREEMPT(full) 
[  210.373481][T10977] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 03/18/2026
[  210.373495][T10977] Call Trace:
[  210.373505][T10977]  <TASK>
[  210.373515][T10977]  dump_stack_lvl+0xe8/0x150
[  210.373546][T10977]  print_report+0xba/0x230
[  210.373568][T10977]  ? af_alg_pull_tsgl+0x1c6/0x740
[  210.373585][T10977]  kasan_report+0x117/0x150
[  210.373610][T10977]  ? af_alg_pull_tsgl+0x1c6/0x740
[  210.373631][T10977]  af_alg_pull_tsgl+0x1c6/0x740
[  210.373656][T10977]  skcipher_recvmsg+0x5df/0x1140
[  210.373687][T10977]  ? __pfx_skcipher_recvmsg+0x10/0x10
[  210.373707][T10977]  ? aa_sock_msg_perm+0xf1/0x1b0
[  210.373726][T10977]  ? bpf_lsm_socket_recvmsg+0x9/0x20
[  210.373748][T10977]  ? security_socket_recvmsg+0x7e/0x2c0
[  210.373771][T10977]  ? __pfx_skcipher_recvmsg+0x10/0x10
[  210.373792][T10977]  sock_recvmsg+0x172/0x1b0
[  210.373816][T10977]  __sys_recvfrom+0x240/0x3c0
[  210.373844][T10977]  ? __pfx___sys_recvfrom+0x10/0x10
[  210.373883][T10977]  ? exc_page_fault+0x6a/0xc0
[  210.373903][T10977]  ? do_user_addr_fault+0xc6f/0x1340
[  210.373931][T10977]  __x64_sys_recvfrom+0xde/0x100
[  210.373957][T10977]  do_syscall_64+0x14d/0xf80
[  210.373976][T10977]  ? trace_irq_disable+0x3b/0x150
[  210.373992][T10977]  ? entry_SYSCALL_64_after_hwframe+0x77/0x7f
[  210.374011][T10977]  ? clear_bhb_loop+0x40/0x90
[  210.374032][T10977]  entry_SYSCALL_64_after_hwframe+0x77/0x7f
[  210.374051][T10977] RIP: 0033:0x7f82aaf5d04e
[  210.374102][T10977] Code: 08 0f 85 a5 a8 ff ff 49 89 fb 48 89 f0 48 89 d7 48 89 ce 4c 89 c2 4d 89 ca 4c 8b 44 24 08 4c 8b 4c 24 10 4c 89 5c 24 08 0f 05 <c3> 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 80 00 00 00 00 48 83 ec 08
[  210.374119][T10977] RSP: 002b:00007f82abd7be88 EFLAGS: 00000246 ORIG_RAX: 000000000000002d
[  210.374140][T10977] RAX: ffffffffffffffda RBX: 00007f82abd7d6c0 RCX: 00007f82aaf5d04e
[  210.374154][T10977] RDX: 0000000000001000 RSI: 00007f82abd7c000 RDI: 0000000000000006
[  210.374167][T10977] RBP: 0000000000000000 R08: 0000000000000000 R09: 0000000000000000
[  210.374177][T10977] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000006
[  210.374189][T10977] R13: 00007f82abd7bf58 R14: 00007f82abd7c000 R15: 0000000000000000
[  210.374212][T10977]  </TASK>
[  210.374219][T10977] 
[  210.603006][T10977] Allocated by task 10977:
[  210.607421][T10977]  kasan_save_track+0x3e/0x80
[  210.612095][T10977]  __kasan_kmalloc+0x93/0xb0
[  210.616682][T10977]  __kmalloc_noprof+0x35c/0x760
[  210.621525][T10977]  sock_kmalloc+0xd6/0x160
[  210.625953][T10977]  skcipher_recvmsg+0x54d/0x1140
[  210.630882][T10977]  sock_recvmsg+0x172/0x1b0
[  210.635464][T10977]  __sys_recvfrom+0x240/0x3c0
[  210.640130][T10977]  __x64_sys_recvfrom+0xde/0x100
[  210.645058][T10977]  do_syscall_64+0x14d/0xf80
[  210.649639][T10977]  entry_SYSCALL_64_after_hwframe+0x77/0x7f
[  210.655522][T10977] 
[  210.657838][T10977] The buggy address belongs to the object at ffff888031bd8ec0
[  210.657838][T10977]  which belongs to the cache kmalloc-32 of size 32
[  210.671710][T10977] The buggy address is located 0 bytes to the right of
[  210.671710][T10977]  allocated 32-byte region [ffff888031bd8ec0, ffff888031bd8ee0)
[  210.686107][T10977] 
[  210.688428][T10977] The buggy address belongs to the physical page:
[  210.694834][T10977] page: refcount:0 mapcount:0 mapping:0000000000000000 index:0x0 pfn:0x31bd8
[  210.703597][T10977] flags: 0xfff00000000000(node=0|zone=1|lastcpupid=0x7ff)
[  210.710700][T10977] page_type: f5(slab)
[  210.714671][T10977] raw: 00fff00000000000 ffff88813fea7780 dead000000000100 dead000000000122
[  210.723419][T10977] raw: 0000000000000000 0000000800400040 00000000f5000000 0000000000000000
[  210.732077][T10977] page dumped because: kasan: bad access detected
[  210.738508][T10977] page_owner tracks the page as allocated
[  210.744227][T10977] page last allocated via order 0, migratetype Unmovable, gfp_mask 0xd2800(GFP_NOWAIT|__GFP_NORETRY|__GFP_COMP|__GFP_NOMEMALLOC), pid 10971, tgid 10971 (modprobe), ts 210316425190, free_ts 210316150518
[  210.763860][T10977]  post_alloc_hook+0x231/0x280
[  210.768642][T10977]  get_page_from_freelist+0x24dc/0x2580
[  210.774195][T10977]  __alloc_frozen_pages_noprof+0x18d/0x380
[  210.780090][T10977]  allocate_slab+0x77/0x660
[  210.784612][T10977]  refill_objects+0x331/0x3c0
[  210.789284][T10977]  __pcs_replace_empty_main+0x2e6/0x730
[  210.794831][T10977]  __kmalloc_cache_noprof+0x392/0x660
[  210.800196][T10977]  kmem_cache_free+0x15b/0x630
[  210.804975][T10977]  tear_down_vmas+0x312/0x520
[  210.809652][T10977]  exit_mmap+0x4b6/0xa10
[  210.813890][T10977]  __mmput+0x118/0x430
[  210.817959][T10977]  exit_mm+0x168/0x220
[  210.822018][T10977]  do_exit+0x6a2/0x23c0
[  210.826171][T10977]  do_group_exit+0x21b/0x2d0
[  210.830758][T10977]  __x64_sys_exit_group+0x3f/0x40
[  210.835793][T10977]  x64_sys_call+0x221a/0x2240
[  210.840482][T10977] page last free pid 10971 tgid 10971 stack trace:
[  210.846987][T10977]  __free_frozen_pages+0xc2b/0xdb0
[  210.852089][T10977]  tlb_finish_mmu+0x144/0x230
[  210.856757][T10977]  exit_mmap+0x498/0xa10
[  210.860988][T10977]  __mmput+0x118/0x430
[  210.865053][T10977]  exit_mm+0x168/0x220
[  210.869109][T10977]  do_exit+0x6a2/0x23c0
[  210.873252][T10977]  do_group_exit+0x21b/0x2d0
[  210.877828][T10977]  __x64_sys_exit_group+0x3f/0x40
[  210.882835][T10977]  x64_sys_call+0x221a/0x2240
[  210.887522][T10977]  do_syscall_64+0x14d/0xf80
[  210.892120][T10977]  entry_SYSCALL_64_after_hwframe+0x77/0x7f
[  210.898022][T10977] 
[  210.900349][T10977] Memory state around the buggy address:
[  210.905994][T10977]  ffff888031bd8d80: fc fc fc fc fc fc fc fc fc fc fc fc fc fc fc fc
[  210.914058][T10977]  ffff888031bd8e00: fc fc fc fc fc fc fc fc fc fc fc fc fc fc fc fc
[  210.922130][T10977] >ffff888031bd8e80: fc fc fc fc fc fc fc fc 00 00 00 00 fc fc fc fc
[  210.930416][T10977]                                                        ^
[  210.937635][T10977]  ffff888031bd8f00: fa fb fb fb fc fc fc fc 00 00 00 fc fc fc fc fc
[  210.945821][T10977]  ffff888031bd8f80: 00 00 00 fc fc fc fc fc 00 00 00 fc fc fc fc fc
[  210.954242][T10977] ==================================================================
[  211.133049][T10977] Kernel panic - not syncing: KASAN: panic_on_warn set ...
[  211.140308][T10977] CPU: 1 UID: 0 PID: 10977 Comm: syz.3.1343 Not tainted syzkaller #0 PREEMPT(full) 
[  211.149694][T10977] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 03/18/2026
[  211.159944][T10977] Call Trace:
[  211.163237][T10977]  <TASK>
[  211.166175][T10977]  vpanic+0x56c/0xa60
[  211.170190][T10977]  ? __pfx_vpanic+0x10/0x10
[  211.174717][T10977]  ? __pfx___schedule+0x10/0x10
[  211.179599][T10977]  panic+0xc5/0xd0
[  211.183350][T10977]  ? __pfx_panic+0x10/0x10
[  211.187805][T10977]  ? preempt_schedule_common+0x82/0xd0
[  211.193293][T10977]  ? af_alg_pull_tsgl+0x1c6/0x740
[  211.199195][T10977]  check_panic_on_warn+0x89/0xb0
[  211.204198][T10977]  ? af_alg_pull_tsgl+0x1c6/0x740
[  211.209332][T10977]  end_report+0x73/0x180
[  211.213608][T10977]  ? af_alg_pull_tsgl+0x1c6/0x740
[  211.218657][T10977]  kasan_report+0x128/0x150
[  211.223370][T10977]  ? af_alg_pull_tsgl+0x1c6/0x740
[  211.228415][T10977]  af_alg_pull_tsgl+0x1c6/0x740
[  211.233368][T10977]  skcipher_recvmsg+0x5df/0x1140
[  211.238345][T10977]  ? __pfx_skcipher_recvmsg+0x10/0x10
[  211.243712][T10977]  ? aa_sock_msg_perm+0xf1/0x1b0
[  211.248645][T10977]  ? bpf_lsm_socket_recvmsg+0x9/0x20
[  211.253958][T10977]  ? security_socket_recvmsg+0x7e/0x2c0
[  211.259497][T10977]  ? __pfx_skcipher_recvmsg+0x10/0x10
[  211.264861][T10977]  sock_recvmsg+0x172/0x1b0
[  211.269370][T10977]  __sys_recvfrom+0x240/0x3c0
[  211.274055][T10977]  ? __pfx___sys_recvfrom+0x10/0x10
[  211.279277][T10977]  ? exc_page_fault+0x6a/0xc0
[  211.283961][T10977]  ? do_user_addr_fault+0xc6f/0x1340
[  211.289250][T10977]  __x64_sys_recvfrom+0xde/0x100
[  211.294210][T10977]  do_syscall_64+0x14d/0xf80
[  211.298813][T10977]  ? trace_irq_disable+0x3b/0x150
[  211.303828][T10977]  ? entry_SYSCALL_64_after_hwframe+0x77/0x7f
[  211.309923][T10977]  ? clear_bhb_loop+0x40/0x90
[  211.314590][T10977]  entry_SYSCALL_64_after_hwframe+0x77/0x7f
[  211.320596][T10977] RIP: 0033:0x7f82aaf5d04e
[  211.325035][T10977] Code: 08 0f 85 a5 a8 ff ff 49 89 fb 48 89 f0 48 89 d7 48 89 ce 4c 89 c2 4d 89 ca 4c 8b 44 24 08 4c 8b 4c 24 10 4c 89 5c 24 08 0f 05 <c3> 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 80 00 00 00 00 48 83 ec 08
[  211.344653][T10977] RSP: 002b:00007f82abd7be88 EFLAGS: 00000246 ORIG_RAX: 000000000000002d
[  211.353072][T10977] RAX: ffffffffffffffda RBX: 00007f82abd7d6c0 RCX: 00007f82aaf5d04e
[  211.361038][T10977] RDX: 0000000000001000 RSI: 00007f82abd7c000 RDI: 0000000000000006
[  211.368997][T10977] RBP: 0000000000000000 R08: 0000000000000000 R09: 0000000000000000
[  211.376965][T10977] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000006
[  211.385017][T10977] R13: 00007f82abd7bf58 R14: 00007f82abd7c000 R15: 0000000000000000
[  211.393266][T10977]  </TASK>
[  211.396432][T10977] Kernel Offset: disabled
[  211.401017][T10977] Rebooting in 86400 seconds..