last executing test programs:

4.312332989s ago: executing program 4 (id=3124):
r0 = socket$key(0xf, 0x3, 0x2)
socket(0x1, 0x802, 0x9)
r1 = bpf$MAP_CREATE_TAIL_CALL(0x0, &(0x7f0000000380)=ANY=[@ANYBLOB="0300000004000000040000000a"], 0x50)
bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000600)={0x11, 0x8, &(0x7f0000000000)=ANY=[@ANYBLOB="beaa00000000000079a008000000000018120000", @ANYRES32=r1, @ANYBLOB="0000000000000000bf030000000000008500000047000000b70000000000000095"], &(0x7f0000000480)='syzkaller\x00'}, 0x94)
r2 = bpf$BPF_BTF_LOAD(0x12, &(0x7f0000000140)={&(0x7f0000000040)=ANY=[@ANYBLOB="9feb01001800000000000000180000001800000004000000020000000100000c02000000000000000000000d0000000000005f"], 0x0, 0x34}, 0x20)
r3 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000200)={0x11, 0x3, &(0x7f0000000100)=@framed={{0x18, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x1800}}, &(0x7f0000000000)='GPL\x00', 0xc, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, r2, 0x8, &(0x7f00000000c0)={0x0, 0x1}, 0x1}, 0x94)
bpf$BPF_PROG_WITH_BTFID_LOAD(0x5, &(0x7f0000000500)=@bpf_ext={0x1a, 0x3, &(0x7f0000000080)=@framed={{0x18, 0x0, 0x0, 0x0, 0xc4f, 0x0, 0x0, 0x0, 0xfffffffc}}, &(0x7f0000000180)='GPL\x00', 0x7, 0x0, 0x0, 0x41000, 0x20, '\x00', 0x0, 0x0, r2, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x1, r3, 0x0, 0x0, 0x0, 0x10, 0x4a6}, 0x94)
sendmsg$key(r0, &(0x7f0000000000)={0x0, 0x3, &(0x7f0000000080)={&(0x7f0000000480)={0x2, 0x3, 0x0, 0x9, 0xc, 0x0, 0x0, 0x0, [@sadb_address={0x3, 0x6, 0x0, 0x0, 0xe, @in={0x2, 0x0, @multicast1=0xe0000009}}, @sadb_sa={0x2, 0x1, 0x0, 0x0, 0x0, 0x0, 0x2}, @sadb_address={0x3, 0x5, 0x6c, 0x0, 0x0, @in={0x2, 0x0, @multicast1}}, @sadb_x_nat_t_port={0x1, 0x15, 0x4e20}, @sadb_x_nat_t_type={0x1, 0x14, 0x3}]}, 0x60}}, 0x0)

4.120095175s ago: executing program 4 (id=3127):
r0 = socket$pppoe(0x18, 0x1, 0x0)
accept4(r0, 0x0, 0x0, 0x80800)
r1 = bpf$PROG_LOAD(0x5, &(0x7f0000000080)={0x3, 0xe, &(0x7f0000001500)=ANY=[@ANYBLOB="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"], &(0x7f0000000b80)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @sched_cls, 0xffffffffffffffff, 0x8, &(0x7f0000000000), 0xfffffedf, 0x10, &(0x7f0000000040)}, 0x48)
bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000180)={r1, 0x2f00020b, 0xe, 0x0, &(0x7f0000000240)="63ecedf7b98637fa929140ac5ea1", 0x0, 0xefdf, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x50)
r2 = socket$nl_netfilter(0x10, 0x3, 0xc)
sendmsg$NFT_BATCH(r2, &(0x7f000000c2c0)={0x0, 0x0, &(0x7f0000000200)={&(0x7f00000008c0)=ANY=[@ANYBLOB="140000001000010000000000000000000000000a28000000000a0101000000005e1affd5020000000900010073797a300000000008000240000000032c000000030a01030000e6ff00000000020000000900010073797a30000000000900030073797a320000000014000000110001"], 0x7c}}, 0x0)
sendmsg$NFT_BATCH(r2, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000240)={&(0x7f0000000140)=ANY=[@ANYBLOB="140000001000010000000000000000000100000a6c000000060a0b160000000000000000020000084000048018000180080001006f7366000c0002800800014000000004240001800b0001007470726f7879000014000280080001400000000208000340000000140900010073797a30000000000900020073797a3200000000140000001100010000000000000000000000000a"], 0x94}, 0x1, 0x0, 0x0, 0x850}, 0x4040080)
pselect6(0x40, &(0x7f0000000040)={0xe4f2, 0x3e7d5849, 0xa, 0x800, 0x3, 0x8, 0x7fff, 0x6}, &(0x7f0000000080)={0xfffffffffffffffa, 0x8bec, 0x4, 0x5, 0x9, 0x1, 0xfffffffffffffffa, 0x8}, &(0x7f00000000c0)={0x80, 0x4e0fc2a, 0x5, 0x9, 0xfd, 0xc7b, 0x10f, 0xb0b8}, &(0x7f0000000100)={0x77359400}, &(0x7f00000002c0)={&(0x7f0000000280)={[0x40]}, 0x8})
close(0x3)

3.909005459s ago: executing program 1 (id=3131):
socket$phonet(0x23, 0x2, 0x1)
r0 = socket$nl_netfilter(0x10, 0x3, 0xc)
sendmsg$NFNL_MSG_CTHELPER_GET(r0, &(0x7f0000000200)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x8040002a}, 0xc, &(0x7f00000001c0)={&(0x7f0000000380)={0x120, 0x1, 0x9, 0x3, 0x0, 0x0, {0x1, 0x0, 0x3}, [@NFCTH_POLICY={0xc, 0x4, 0x0, 0x1, {0x8, 0x1, 0x1, 0x0, 0x3}}, @NFCTH_STATUS={0x8}, @NFCTH_TUPLE={0x38, 0x2, [@CTA_TUPLE_ZONE={0x6}, @CTA_TUPLE_IP={0x14, 0x1, 0x0, 0x1, @ipv4={{0x8, 0x1, @dev={0xac, 0x14, 0x14, 0x25}}, {0x8, 0x2, @local}}}, @CTA_TUPLE_PROTO={0xc, 0x2, 0x0, 0x1, {0x5, 0x1, 0x1}}, @CTA_TUPLE_PROTO={0xc, 0x2, 0x0, 0x1, {0x5, 0x1, 0x88}}]}, @NFCTH_POLICY={0xc, 0x4, 0x0, 0x1, {0x8, 0x1, 0x1, 0x0, 0x8}}, @NFCTH_TUPLE={0x88, 0x2, [@CTA_TUPLE_PROTO={0xc, 0x2, 0x0, 0x1, {0x5, 0x1, 0x6}}, @CTA_TUPLE_IP={0x2c, 0x1, 0x0, 0x1, @ipv6={{0x14, 0x3, @remote}, {0x14, 0x4, @mcast2}}}, @CTA_TUPLE_ZONE={0x6, 0x3, 0x1, 0x0, 0x4}, @CTA_TUPLE_ZONE={0x6, 0x3, 0x1, 0x0, 0x1002}, @CTA_TUPLE_PROTO={0xc, 0x2, 0x0, 0x1, {0x47, 0x1, 0x3a}}, @CTA_TUPLE_PROTO={0xc, 0x2, 0x0, 0x1, {0x5, 0x1, 0x1}}, @CTA_TUPLE_ZONE={0x6, 0x3, 0x1, 0x0, 0x1}, @CTA_TUPLE_ZONE={0x6, 0x3, 0x1, 0x0, 0x3}, @CTA_TUPLE_IP={0x0, 0x1, 0x0, 0x1, @ipv4={{0x0, 0x1, @initdev={0xac, 0x1e, 0x1, 0x0}}, {0x0, 0x2, @rand_addr=0x64010102}}}, @CTA_TUPLE_PROTO={0xc, 0x2, 0x0, 0x1, {0x5, 0x1, 0x84}}]}, @NFCTH_QUEUE_NUM={0x8, 0x3, 0x1, 0x0, 0x1000}, @NFCTH_STATUS={0x8, 0x6, 0x1, 0x0, 0x1}, @NFCTH_PRIV_DATA_LEN={0x8, 0x5, 0x1, 0x0, 0xe}, @NFCTH_POLICY={0xc, 0x4, 0x0, 0x1, {0x8, 0x1, 0x1, 0x0, 0x8}}, @NFCTH_PRIV_DATA_LEN={0x8, 0x5, 0x1, 0x0, 0x20}]}, 0x120}, 0x1, 0x0, 0x0, 0x41}, 0x8080)
r1 = socket$inet_udp(0x2, 0x2, 0x0)
socket$inet(0xa, 0x801, 0x84)
r2 = socket$inet_sctp(0x2, 0x5, 0x84)
ioctl$sock_inet_SIOCSARP(r2, 0x8955, &(0x7f0000004b00)={{0x2, 0x4e21, @rand_addr=0x64010101}, {0x0, @dev={'\xaa\xaa\xaa\xaa\xaa', 0x2}}, 0x4, {0x2, 0x4e24, @remote}, 'bridge0\x00'})
r3 = syz_init_net_socket$nfc_llcp(0x27, 0x3, 0x1)
bind$bt_hci(r3, 0x0, 0x0)
socket$inet6_sctp(0xa, 0x5, 0x84)
socket$nl_netfilter(0x10, 0x3, 0xc)
r4 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10)
r5 = syz_genetlink_get_family_id$netlbl_cipso(&(0x7f00000002c0), r4)
sendmsg$NLBL_CIPSOV4_C_ADD(r4, &(0x7f0000000200)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000840)=ANY=[@ANYBLOB='P\x00\x00\x00', @ANYRES16=r5, @ANYBLOB="010000000000040000000100000008000100020000002c000480050003000200000005000300000000000500030080ff0000050003010200000005000300060000000800020002"], 0x50}, 0x1, 0x0, 0x0, 0xc082}, 0x20004080)
sendmsg$NFT_BATCH(r0, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000009a40)={&(0x7f0000000080)=ANY=[@ANYRES8=0x0, @ANYRESDEC=r0, @ANYRES64=r1, @ANYRES64=r0, @ANYRES32=r0], 0xc4}, 0x1, 0x0, 0x0, 0x10}, 0x810)

3.798506034s ago: executing program 4 (id=3132):
r0 = socket$netlink(0x10, 0x3, 0x0)
r1 = socket(0x80000000000000a, 0x2, 0x0)
setsockopt$inet6_group_source_req(r1, 0x29, 0x2e, &(0x7f0000000200)={0x0, {{0xa, 0x1, 0x0, @mcast2}}, {{0xa, 0x4e23, 0x0, @dev={0xfe, 0x80, '\x00', 0x35}}}}, 0x108)
bind$alg(r1, &(0x7f0000000000)={0x26, 'aead\x00', 0x0, 0x0, 'morus640\x00'}, 0x58)
sendmsg$nl_route(r0, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000001140)={&(0x7f0000000280)=@newlink={0x3c, 0x10, 0x503, 0x402, 0x0, {0x0, 0x0, 0x0, 0x0, 0x200}, [@IFLA_LINKINFO={0x1c, 0x12, 0x0, 0x1, @macsec={{0xb}, {0xc, 0x2, 0x0, 0x1, [@IFLA_MACSEC_ICV_LEN={0x5, 0x3, 0x10}]}}}]}, 0x3c}, 0x1, 0x0, 0x0, 0x8800}, 0x0)

3.789692575s ago: executing program 1 (id=3133):
bpf$BPF_GET_BTF_INFO(0xf, &(0x7f0000000180)={0xffffffffffffffff, 0x20, &(0x7f0000000140)={&(0x7f0000000040)=""/24, 0x18, <r0=>0x0, &(0x7f0000000080)=""/156, 0x9c}}, 0x10)
bpf$PROG_LOAD(0x5, &(0x7f00000054c0)={0x3, 0x7, &(0x7f0000001000)=ANY=[@ANYBLOB="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"], &(0x7f0000000000)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x18, '\x00', 0x0, @sched_cls, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, r0}, 0x94)

3.561942406s ago: executing program 4 (id=3137):
sendmsg$nl_generic(0xffffffffffffffff, &(0x7f0000000080)={0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x42814}, 0x40084)
r0 = socket$inet_udp(0x2, 0x2, 0x0)
r1 = socket$nl_generic(0x10, 0x3, 0x10)
r2 = syz_genetlink_get_family_id$l2tp(&(0x7f0000000000), 0xffffffffffffffff)
sendmsg$L2TP_CMD_TUNNEL_CREATE(r1, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000100)={&(0x7f0000000180)=ANY=[@ANYBLOB='<\x00\x00\x00', @ANYRES16=r2, @ANYBLOB="230900000000000000000100000005000700000000000800090000000000060002000100000008000a000000000008001700", @ANYRES64=r0], 0x3c}}, 0x0)
bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000100)={0x18, 0x6, &(0x7f0000000440)=ANY=[@ANYBLOB="18000000fffffff300000000ffffff80e500020000000000e500fcff00000000850000000200000095000000000000005b5e2e900bdddabda4ea282a7fd8ef1515eccd8e7b28a7f068db7bb69a67826fa4641b74ca4cf93d8bc9d059dce77ebee4728b55aa275624a4234b4f63"], &(0x7f00000000c0)='GPL\x00', 0x4, 0x0, 0x0, 0x0, 0x8, '\x00', 0x0, 0x25, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x4}, 0x94)

3.504916369s ago: executing program 1 (id=3138):
r0 = socket$inet6(0xa, 0x1, 0x8010000000000084)
r1 = socket$nl_netfilter(0x10, 0x3, 0xc)
sendmsg$NFT_BATCH(r1, &(0x7f000000c2c0)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000340)=ANY=[@ANYBLOB="140000001000010000000000000000000000000a28000000000a0101000000005e1affd5020000000900010073797a300000000008000240000000032c000000030a01030000e6ff00000000020000000900010073797a30000000000900030073797a320000000014000000110001"], 0x7c}}, 0x0)
sendmsg$NFT_BATCH(r1, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000001400)=ANY=[@ANYBLOB="140000001000010000000000000000000000000a50000000060a0b040000000000000000020000002400048020000180070001006374000014000280080002400000000f08000140000000020900010073797a30000000000900020073797a320000000014000000110001"], 0x78}}, 0x0)
bind$inet6(r0, &(0x7f00000000c0)={0xa, 0x4e21, 0xb, @empty}, 0x1c)
connect$inet6(r0, &(0x7f0000000000)={0xa, 0x4e21, 0x0, @ipv4={'\x00', '\xff\xff', @dev={0xac, 0x14, 0x14, 0x39}}}, 0x1c)
setsockopt$inet_sctp6_SCTP_PEER_ADDR_PARAMS(r0, 0x84, 0x9, &(0x7f0000000300)={0x0, @in6={{0xa, 0x0, 0x0, @empty, 0xfffffffe}}, 0x80000, 0x0, 0x0, 0x0, 0xb3550aa4ba878396}, 0x9c)
r2 = socket$inet_udp(0x2, 0x2, 0x0)
setsockopt$EBT_SO_SET_ENTRIES(r2, 0x0, 0x80, &(0x7f0000000d00)=@nat={'nat\x00', 0x19, 0x1, 0x21e, [0x200000002300, 0x0, 0x0, 0x2000000024be, 0x2000000024ee], 0x20, 0x0, &(0x7f0000002300)=ANY=[@ANYBLOB="00000000000000000000000000000000000000000000000000000000000000000000000000000000feffffff01000000050000006b0000000016636169663000000000000000e3ff00007665746831000000000000000000000073797a5f74756e0039da0000f8ff0000000076657468310000000000000000001000aaaaaaaaaa3d000000ff00000180c2000003ff00ffffff00ae000000560100008e0100006f776e6572000000000000000000000000000000001800"/198, @ANYRES32, @ANYRES32, @ANYRES32=0xee00, @ANYRES32, @ANYBLOB="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"]}, 0x296)
sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f0000000300)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000000)=@newtaction={0x18, 0x30, 0xffff, 0x70bd29, 0x0, {}, [{0x4}]}, 0x18}}, 0x0)
getsockname$unix(0xffffffffffffffff, &(0x7f0000000000)=@abs, &(0x7f0000000080)=0x6e)
socket$inet_icmp_raw(0x2, 0x3, 0x1)
syz_init_net_socket$bt_hci(0x1f, 0x3, 0x5)
r3 = socket$nl_netfilter(0x10, 0x3, 0xc)
sendmsg$NFT_BATCH(r3, &(0x7f000000c2c0)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000340)=ANY=[@ANYBLOB="140000001000010000000000000000000000000a28000000000a0101000000005e1affd5020000000900010073797a300000000008000240000000032c000000030a01030000e6ff00000000020000000900010073797a30000000000900030073797a320000000014000000110001"], 0x7c}}, 0x0)
sendmsg$NFT_BATCH(r3, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000240)=ANY=[@ANYBLOB="140000001000010000000000000000000000000a50000000060a0b0400000000000000000200fffe2400048020000180080001006e61740014000280080001400000000108000340000000130900010073797a30000000000900020073797a3200000000140000001100010000000000000000000500000aedf3ff9a9aa81a65380cbfedbf68d3f5a7b075b3c3"], 0x78}, 0x1, 0x0, 0x0, 0x24040840}, 0x0)
syz_emit_ethernet(0x1f, &(0x7f0000000440)=ANY=[@ANYBLOB="01aaaaaaaaaaaaaaaaaaaaaa0011aa651dcaac000000000000000000000000402a490d48b631931dfdaa2dbf2b76506631104347d08a66c3032a67c0b10f7d695103ad0e390b49f5c89e057cea0cda7a1e13d85a1bbf8bd49d814fb3a8bc4df0bc2fd31e9f77f1bae5d23f41066b5654bc3ccfa94400000000eaf9db8f0f346cd0987ecacc4b8cc59494f895e73afc7257f6fe7a8acb3d"], 0x0)
close(0x4)
syz_open_procfs$namespace(0x0, &(0x7f0000000200)='ns/time\x00')
unshare(0x6a040000)
socket$inet_sctp(0x2, 0x1, 0x84)
setsockopt$IP_VS_SO_SET_ADD(0xffffffffffffffff, 0x0, 0x482, &(0x7f0000000080)={0x16, @private=0xa010101, 0x15, 0x3, 'wlc\x00', 0x2e, 0x5, 0x72}, 0x2c)
r4 = socket$kcm(0xa, 0x2, 0x0)
setsockopt$IP_VS_SO_SET_ADDDEST(0xffffffffffffffff, 0x0, 0x487, &(0x7f0000000000)={{0x84, @private=0xa010102, 0x4e20, 0x3, 'lc\x00', 0x5, 0x8, 0x77}, {@loopback, 0x4e20, 0x10000, 0x2, 0x2}}, 0x44)
unshare(0x2010100)
sendmsg$sock(r4, &(0x7f0000000400)={&(0x7f0000000580)=@in6={0x2, 0x4e22, 0x0, @dev}, 0x80, 0x0, 0x0, &(0x7f0000000000)=[@mark={{0x14, 0x1, 0x24, 0x3}}], 0x18}, 0x0)
syz_init_net_socket$nl_generic(0x10, 0x3, 0x10)
r5 = socket$kcm(0x10, 0x2, 0x0)
sendmsg$inet(r5, &(0x7f0000000040)={0x0, 0xa1, &(0x7f00000011c0)=[{&(0x7f0000000080)="5c00000013006bec9e3be35c6e17aa31076b876c0d000000ba090000160af3653c001ac00400020208000200030001002c000000eab556a705251e618294ff0051f60a84c9f4d4938037e786a6d0000300000000000000ffffc6c953", 0x5c}], 0x1, 0x0, 0x0, 0x1f00c00e}, 0x2000c090)
socket$netlink(0x10, 0x3, 0x0)

3.384134155s ago: executing program 4 (id=3140):
r0 = socket$nl_netfilter(0x10, 0x3, 0xc)
sendmsg$NFT_BATCH(r0, &(0x7f00000007c0)={0x0, 0x0, &(0x7f0000000780)={&(0x7f0000000800)={{0x14}, [@NFT_MSG_DELCHAIN={0x248, 0x5, 0xa, 0xc2b8d9f73f31ea1a, 0x0, 0x0, {0x2}, [@NFTA_CHAIN_HOOK={0x80, 0x4, 0x0, 0x1, [@NFTA_HOOK_DEV={0x14, 0x3, 'syzkaller0\x00'}, @NFTA_HOOK_DEV={0x14, 0x3, 'tunl0\x00'}, @NFTA_HOOK_DEV={0x14, 0x3, 'wg2\x00'}, @NFTA_HOOK_DEV={0x14, 0x3, 'syzkaller1\x00'}, @NFTA_HOOK_HOOKNUM={0x8, 0x1, 0x1, 0x0, 0x1}, @NFTA_HOOK_PRIORITY={0x8, 0x2, 0x1, 0x0, 0x2d6ed83c}, @NFTA_HOOK_DEV={0x14, 0x3, 'vlan0\x00'}, @NFTA_HOOK_PRIORITY={0x8, 0x2, 0x1, 0x0, 0x47fa5558}]}, @NFTA_CHAIN_HANDLE={0xc, 0x2, 0x1, 0x0, 0x1}, @NFTA_CHAIN_TABLE={0x9, 0x1, 'syz1\x00'}, @NFTA_CHAIN_HOOK={0x44, 0x4, 0x0, 0x1, [@NFTA_HOOK_DEV={0x14, 0x3, 'dvmrp1\x00'}, @NFTA_HOOK_DEV={0x14, 0x3, 'geneve1\x00'}, @NFTA_HOOK_PRIORITY={0x8, 0x2, 0x1, 0x0, 0x68ffd0ec}, @NFTA_HOOK_PRIORITY={0x8, 0x2, 0x1, 0x0, 0x283acd19}, @NFTA_HOOK_HOOKNUM={0x8, 0x1, 0x1, 0x0, 0x1}]}, @NFTA_CHAIN_USERDATA={0xc2, 0xc, "dc98967104b12c564cc6740ad019c2ae0353573438a6ba36bf8ba35f2435f80f6a7f1bc4af6f6d8e7bdd57bbab9090217fa936cad82e44a5c463c81d2ff2958c99205e5020ae7634079f687daeed1fe8596776656e487709598cd53e31c390b9440f5b1a66b5b486deed76ae70accfd33c6c92bbffb0ced0966a1b9a74933152180bcfee1d07f4a6a6b2d78375dd4696454f8366ee08b57068e2de1d82f8e974bc05548720205ee6c6bbe2c8a216d3bce0795cd9d7d88805ab7fd96787a4"}, @NFTA_CHAIN_USERDATA={0x2c, 0xc, "72b79bdd23d030f0931f14809b6b1219613dc9d4331c903caa2d123ab4f561df035684d085a9d35b"}, @NFTA_CHAIN_HOOK={0x4c, 0x4, 0x0, 0x1, [@NFTA_HOOK_DEV={0x14, 0x3, 'bond0\x00'}, @NFTA_HOOK_HOOKNUM={0x8, 0x1, 0x1, 0x0, 0x3}, @NFTA_HOOK_HOOKNUM={0x8, 0x1, 0x1, 0x0, 0x4}, @NFTA_HOOK_HOOKNUM={0x8, 0x1, 0x1, 0x0, 0x1}, @NFTA_HOOK_DEV={0x14, 0x3, 'batadv0\x00'}, @NFTA_HOOK_HOOKNUM={0x8, 0x1, 0x1, 0x0, 0x2}]}, @NFTA_CHAIN_NAME={0x9, 0x3, 'syz0\x00'}, @NFTA_CHAIN_FLAGS={0x8, 0xa, 0x1, 0x0, 0x1}, @NFTA_CHAIN_ID={0x8, 0xb, 0x1, 0x0, 0x1}]}, @NFT_MSG_DELOBJ={0x2bc, 0x14, 0xa, 0x301, 0x0, 0x0, {0x2, 0x0, 0x6}, [@NFTA_OBJ_USERDATA={0xd0, 0x8, "04f5f05644735e7cfeb35e787d3a71f8a1a5a5f1873fb204ecb510bbf9a99b926659cb35439782eb3c27065dff4c905dbd7b0199860a279064c8db41c749516bbbc38aafabc49df0c07b15ac71d6263698ccd71def137f2e9edff87afd2ada56666bbbe44109dcd5ee741c0a383f7bd8437c5d432360735b223c65a99c3638ea2cfee1c4e33155e971f0ca3c4d62038ad9a1e9fa48f93545bfd69a3db3b0ab545667a1badeef8daea127a899dabd7144cbe3574bd5a21b92c5f624e5f00ed876981b9ec1c38e7f5de69b97fa"}, @NFTA_OBJ_HANDLE={0xc, 0x6, 0x1, 0x0, 0x3}, @NFTA_OBJ_HANDLE={0xc, 0x6, 0x1, 0x0, 0x2}, @NFTA_OBJ_USERDATA={0xd0, 0x8, "a4d74b00b57d79f4db78fd294cfa0950932c6be368976b4c64478d469210e3e1a34bdbca331a74b779fbceac4214869056a750ef784438eccc740e12b1f0842516940ddfc382513add490254f3921b90bd059e85bbe6089543f3dd1d9594e737589931499524c27d57dca95005999840b06bcc6969a99ed5bbfde4af14ffd726cb6edec72b446e18f6eaf71f26699660cec14d11bdd9706bae85cfdfca5376aec92b3223ccd1adede7c5f9646aafa83649cf69b61b372eb99127f61b1ba09292dfa4ed0916b8a2e40dc41b05"}, @NFTA_OBJ_USERDATA={0xf0, 0x8, "3a7f3c62a5dafc86a736a795b62823dd739e8d0f05c79ee535e8449e7d77762cccb8719f6b285be183be20618368423a2e534e2addf857880d7b59cdd412c453aeccf62e59447e3f5258a54565bfe9bfc0fc0b065645e764e334a18efd5bc51e5285a2c742ab0f575334194b3ab818843d7b253253856fafe34b1a2c4276ad4ed6dd3f5c2dbc0d73909a0f90098c2c02e8af784b28e048e8cd73d90745b4574c8fc2135e3376f8824e428cd94b449d20dc2563533a682156afe4579759120895e4252b90ff75b466f9b9ad74bef1338929538522c2d66949598f7618139e8aa748cf3da7d4247f91d08259c3"}]}], {0x14, 0x11, 0x1, 0x0, 0x0, {0x3}}}, 0x52c}}, 0x0)

3.236887652s ago: executing program 4 (id=3141):
r0 = socket$nl_route(0x10, 0x3, 0x0)
ioctl$sock_SIOCGIFINDEX(r0, 0x8933, &(0x7f0000000080)={'veth1_macvtap\x00', <r1=>0x0})
sendmsg$nl_route(r0, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000100)={&(0x7f0000000340)=@newlink={0x44, 0x10, 0x401, 0xfffffffc, 0x25dfdbff, {0x0, 0x0, 0x0, 0x0, 0x31943}, [@IFLA_LINKINFO={0x1c, 0x12, 0x0, 0x1, @macsec={{0xb}, {0xc, 0x2, 0x0, 0x1, [@IFLA_MACSEC_VALIDATION={0x5}]}}}, @IFLA_LINK={0x8, 0x5, r1}]}, 0x44}, 0x1, 0x0, 0x0, 0x2004d808}, 0x0) (async)
r2 = accept(r0, &(0x7f0000000000)=@pppoe={0x18, 0x0, {0x0, @multicast}}, &(0x7f00000000c0)=0x80)
setsockopt$inet_sctp_SCTP_ADAPTATION_LAYER(r2, 0x84, 0x7, &(0x7f0000000140)={0x1ba7}, 0x4)

2.268670574s ago: executing program 3 (id=3152):
r0 = socket$nl_route(0x10, 0x3, 0x0)
r1 = socket$nl_route(0x10, 0x3, 0x0)
ioctl$ifreq_SIOCGIFINDEX_batadv_hard(r0, 0x8933, &(0x7f00000003c0)={'batadv_slave_0\x00', <r2=>0x0})
r3 = socket$alg(0x26, 0x5, 0x0)
bind$alg(r3, &(0x7f00000001c0)={0x26, 'aead\x00', 0x0, 0x0, 'gcm(aes)\x00'}, 0x4c)
setsockopt$ALG_SET_KEY(r3, 0x117, 0x1, &(0x7f0000000300)="c99b57381801238c09d05c164a534308", 0x10)
r4 = accept4(r3, 0x0, 0x0, 0x0)
socket$nl_route(0x10, 0x3, 0x0)
socket$inet6_tcp(0xa, 0x1, 0x0)
socket$phonet_pipe(0x23, 0x5, 0x2)
syz_init_net_socket$nfc_llcp(0x27, 0x2, 0x1)
socket$inet6_tcp(0xa, 0x1, 0x0)
pselect6(0x40, &(0x7f00000001c0)={0x0, 0x0, 0x3, 0xfffffffffffffffd}, 0x0, &(0x7f00000002c0)={0x3ff, 0xb, 0x0, 0x9, 0x0, 0x0, 0x7fffffff}, 0x0, 0x0)
ioctl$int_in(r4, 0x5452, &(0x7f00000013c0)=0xc7f)
syz_genetlink_get_family_id$ethtool(&(0x7f0000000040), r4)
sendmsg$nl_route(r1, &(0x7f0000000140)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f00000002c0)=ANY=[@ANYBLOB="280000001400090a0000000000000000021f4800", @ANYRES32=r2, @ANYBLOB="08000200e4d4c21e080008004c06"], 0x28}, 0x1, 0x0, 0x0, 0x20008000}, 0x0)
sendmsg$nl_route_sched(r0, &(0x7f0000000200)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000400)=@newtfilter={0x24, 0x11, 0xd27, 0x1000000, 0x0, {0x0, 0x0, 0x74, r2}}, 0x24}, 0x1, 0xf0ffffffffffff}, 0x0)

2.109868073s ago: executing program 0 (id=3153):
r0 = syz_init_net_socket$llc(0x1a, 0x3, 0x0)
r1 = socket$kcm(0xa, 0x3, 0x3a)
sendmsg$kcm(r1, &(0x7f0000000080)={&(0x7f0000000000)=@l2tp6={0xa, 0x0, 0x0, @loopback={0xffffffffffff0000, 0xac14140c}, 0x1, 0x2}, 0x80, &(0x7f0000000b00)=[{&(0x7f00000000c0)='f', 0x1}, {&(0x7f0000000540)}, {&(0x7f00000005c0)="a41500d40f870153ee4fce193c25ab26263ea88ba244b08d18ae8faf7d8f03eb931e4c6ea59abefa0deafe4aad080951eb6cb2248f9b7b5030c0f25523f7bc7fce26e21d9cb2f496e56ba52ad15cb9df02350b229f699b58695e87994fa6b72e71c4975fb27f21c231144f4550e312fc00a115a5b8b43c9e4f8051144f3d3bb7587a1bc3e4adef44dcbac98f8c11846f30dc605a1991f3737be04d1b71392453c03acc93aa1b287e3cca9dec1ee42f5936d4e98371fa29c513e6", 0xba}, {&(0x7f00000006c0)="2048ce86e9f504a0a1212621677c30c5d24967e23f30ea1eea02186558c83aa6c66c40f6ece5b43b75977f42ac35bc44c304b341eb8107d6fb5aa637ea922ff6420f895fe5c1a33585e220ad1d953c6b3c7699e001c74dd310cb8391884aede6d5ac2a591ff8d889073136cda13303085bd54422c5f8dca2a8b25a763fffc22ce50f971082", 0x85}, {&(0x7f00000004c0)}, {&(0x7f0000000840)="df95a61cebf6e329f0d892a38b6c4e2dda56fd33dffffbeb6c5987c08bc0f11a84f65754db76a11ae552c913a3c2dc357e680dd41c69f27992aeadef928cb0c5bd431311743055a91788205b173bf6b44d9c80fbdf49189ce18b199e4e72ca0d8875b43007836926da48b6a97a77dd119dc8902eb14695ea303925f52a433be4f9036086e8207f6dbc85f142373ad61cd2ec3fa2347f77f1a171a78893b22c1578f1bbe3b093b6d191ab4175ccd904cc21fa942b809a3681fef688e553b42dbdf617bd28", 0xc4}, {0x0}, {0x0}], 0x8, 0x0, 0x0, 0x900}, 0x60)
r2 = socket$nl_netfilter(0x10, 0x3, 0xc)
sendmsg$IPSET_CMD_LIST(r2, &(0x7f00000004c0)={0x0, 0x0, &(0x7f0000000340)={&(0x7f0000000380)=ANY=[@ANYBLOB="280000000706010200000000000000000a0000050e0001000700"], 0x28}, 0x1, 0x0, 0x0, 0x4000}, 0x4)
ioctl$XFS_IOC_FD_TO_HANDLE(r0, 0xc038586a, &(0x7f0000000180)={<r3=>r0, &(0x7f0000000040)='blkio.bfq.io_queued\x00', 0xc082, 0x0, 0x5, &(0x7f00000000c0), &(0x7f0000000100)=0x1})
r4 = socket$packet(0x11, 0x2, 0x300)
setsockopt$packet_fanout(r4, 0x107, 0x12, &(0x7f0000000000)={0x0, 0x8000}, 0x4)
r5 = openat$tun(0xffffffffffffff9c, &(0x7f0000000000), 0x40241, 0x0)
ioctl$TUNSETIFF(r5, 0x400454ca, &(0x7f0000000200)={'syzkaller1\x00', 0xc201})
r6 = socket$kcm(0x2, 0x3, 0x2)
ioctl$SIOCSIFHWADDR(r6, 0x8914, &(0x7f0000000040)={'syzkaller1\x00', @broadcast})
write$tun(r5, &(0x7f00000000c0)=ANY=[@ANYBLOB="080008000600090000001400000045"], 0xfce)
r7 = bpf$MAP_CREATE_CONST_STR(0x0, &(0x7f0000000b40)=ANY=[@ANYBLOB="02000000040000000800000001"], 0x48)
bpf$BPF_MAP_CONST_STR_FREEZE(0x16, &(0x7f0000000040)={r7, <r8=>0xffffffffffffffff}, 0x4)
r9 = bpf$PROG_LOAD(0x5, &(0x7f00000004c0)={0x1d, 0x18, &(0x7f0000000240)=ANY=[@ANYRES8=r1, @ANYRES32=r8, @ANYBLOB="0000000000000000b70500000800000085000000a700000095"], &(0x7f00000001c0)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x10, '\x00', 0x0, @fallback=0x30, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94)
bpf$PROG_BIND_MAP(0xa, &(0x7f0000000000)={r9, r8}, 0xc)
r10 = syz_genetlink_get_family_id$ethtool(&(0x7f0000000300), 0xffffffffffffffff)
sendmsg$ETHTOOL_MSG_TSINFO_GET(0xffffffffffffffff, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000180)=ANY=[@ANYBLOB, @ANYRES16=r10, @ANYBLOB="010000000000000000001d00000020000180140002006e657464657673696d3000000000000008"], 0x34}}, 0x0)
ioctl$sock_bt_hidp_HIDPGETCONNINFO(r3, 0x800448d3, &(0x7f0000000c80)={@none, 0xfff, 0x6, 0x8, 0x5, 0x2, "3de3ec9ae3c724fe2f9bd0af27c8d617197ef4b2ed8bd6e0f603e646d7cb8a65f1c191f9f4a5810a2565ececbd771600ffd1edb59212f2874b480287ec294e84af5ce61f642cbd53aea036944ca0eefae708aad5e03d91cc8eccfd4ec4665065f52089208b99ebf8fd14645a3919cb804846ecde861b5e51324e355bc43721f9"})
bind$llc(r0, &(0x7f0000000140)={0x1a, 0x0, 0x0, 0xff, 0x2, 0x9}, 0x10)
socket$alg(0x26, 0x5, 0x0)
setsockopt$packet_int(0xffffffffffffffff, 0x107, 0xf, &(0x7f0000000000)=0x9, 0x4)
ioctl$sock_SIOCGIFINDEX(0xffffffffffffffff, 0x8933, &(0x7f0000000300)={'ip_vti0\x00', <r11=>0x0})
sendto$packet(0xffffffffffffffff, &(0x7f0000000180)="0b03feff4f00021202004788aa96a13bb1000011000088ca1a00", 0x1fffc, 0x0, &(0x7f0000000140)={0x11, 0x0, r11}, 0x14)

1.564565848s ago: executing program 0 (id=3154):
unshare(0x22020600) (async, rerun: 32)
bpf$BPF_PROG_WITH_BTFID_LOAD(0x5, &(0x7f0000002300)=@bpf_ext={0x1c, 0x10, &(0x7f00000001c0)=ANY=[@ANYBLOB="181100"/20, @ANYRESOCT, @ANYRESDEC], &(0x7f0000000440)='GPL\x00', 0x81, 0xff1, &(0x7f00000023c0)=""/4081, 0x41000, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, &(0x7f0000002140)={0x6, 0x2}, 0x8, 0x10, &(0x7f0000002180)={0x5, 0xd, 0x7, 0x6a}, 0x10, 0x190c7, 0xffffffffffffffff, 0x0, &(0x7f0000000200)=[0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff], 0x0, 0x10, 0xdca}, 0x94) (async, rerun: 32)
socket$inet_tcp(0x2, 0x1, 0x0) (async)
r0 = socket$packet(0x11, 0x2, 0x300)
ioctl$sock_SIOCGIFINDEX(r0, 0x8933, &(0x7f0000000340)={'macsec0\x00'}) (async)
socket(0x8000000010, 0x2, 0xffffffff)
socket$inet(0x2, 0x2, 0x0) (async)
r1 = socket$igmp(0x2, 0x3, 0x2) (async)
r2 = socket$nl_netfilter(0x10, 0x3, 0xc)
sendmsg$NFT_BATCH(r2, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000240)=ANY=[@ANYBLOB="140000001000010000000000000000000500000a28000000000a030000000000000000000a00000708000240000000020900010073797a31000000002c000000030a010100000000000000000a0000070900010073797a31000000000900030073797a320000000014000000110001"], 0x7c}, 0x1, 0x0, 0x0, 0x4000}, 0x0) (async, rerun: 64)
sendmsg$NFT_BATCH(r2, &(0x7f0000009b40)={0x0, 0x0, &(0x7f0000009b00)={&(0x7f0000000100)=ANY=[@ANYBLOB="140000001000010000000000000000000500000a4c000000090a010400000000000000000a0000040900010073797a310000000008000540000000020900020073797a310000000008000a40fffffffc080003400000001408000c4000000e45400000000c0a010100000000000000000a0000060900020073797a31000000000900010073797a310000000014000380100000800c00018006000100d103000014000000110001"], 0xb4}, 0x1, 0x0, 0x0, 0x4000850}, 0x40) (rerun: 64)
sendmsg$NFT_BATCH(r2, &(0x7f0000009b40)={0x0, 0x0, &(0x7f0000000040)={&(0x7f00000004c0)=ANY=[], 0x54}, 0x1, 0x0, 0x0, 0x20008080}, 0x40)
setsockopt$EBT_SO_SET_ENTRIES(r1, 0x0, 0x80, &(0x7f0000000080)=@broute={'broute\x00', 0x70, 0xff00, 0x90, [0x0, 0x0, 0x0, 0x0, 0x200000001300, 0x200000001330], 0x0, 0x0, &(0x7f0000001300)=ANY=[@ANYBLOB]}, 0x78)
r3 = socket$nl_route(0x10, 0x3, 0x0) (async)
sendto$inet6(0xffffffffffffffff, &(0x7f0000847fff), 0x0, 0x0, 0x0, 0x0)
r4 = socket$nl_route(0x10, 0x3, 0x0) (async)
ioctl$sock_SIOCGIFINDEX(r3, 0x8933, &(0x7f00000000c0)={'veth0_to_team\x00', <r5=>0x0})
sendmsg$nl_route(r4, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000001140)={&(0x7f0000000040)=ANY=[@ANYBLOB="680000001000030500"/20, @ANYRES32=0x0, @ANYBLOB="0000000000000000400012800c0001006d6163766c616e00300002800800010010000000100005800a000400aaaaaaaaaabb000008000300030000000a000400aaaaaaaab1aa000008000500", @ANYRES32=r5], 0x68}}, 0x0) (async, rerun: 32)
sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000240)={&(0x7f0000000040)=ANY=[], 0x68}}, 0x20000880) (async, rerun: 32)
r6 = socket(0x10, 0x3, 0x0)
sendmmsg(r6, &(0x7f0000000000), 0x4000000000001f2, 0x0)
sendmsg$nl_route_sched(r3, &(0x7f00000003c0)={0x0, 0x0, &(0x7f0000000700)={&(0x7f0000000180)=@getchain={0x24, 0x11, 0x839, 0x70bd28, 0x25dfdbfd, {0x0, 0x0, 0x0, r5, {0x1, 0x2}, {0xd, 0x10}, {0x1, 0xfff1}}}, 0x24}, 0x1, 0x0, 0x0, 0x84}, 0x0) (async, rerun: 64)
r7 = socket(0x840000000002, 0x3, 0x100) (rerun: 64)
connect$inet(r7, &(0x7f0000000080)={0x2, 0x0, @local}, 0x10) (async)
sendmmsg$inet(0xffffffffffffffff, &(0x7f0000005240), 0x4000095, 0x0) (async, rerun: 64)
sendmmsg$unix(0xffffffffffffffff, &(0x7f0000000000), 0x651, 0x0) (async, rerun: 64)
r8 = socket$inet_tcp(0x2, 0x1, 0x0)
ioctl$sock_inet_SIOCSARP(r8, 0x8955, 0x0)
socket$nl_route(0x10, 0x3, 0x0) (async)
socketpair$unix(0x1, 0x1, 0x0, &(0x7f00000000c0))

1.507678577s ago: executing program 0 (id=3155):
recvmmsg(0xffffffffffffffff, 0x0, 0x0, 0x84000000, 0x0)
r0 = socket$inet6(0xa, 0x2, 0x0)
bind$inet6(r0, &(0x7f0000000100)={0xa, 0x4e20, 0x0, @empty}, 0x1c)
ioctl$sock_kcm_SIOCKCMCLONE(0xffffffffffffffff, 0x89e2, &(0x7f0000000380)={<r1=>r0})
getsockopt$IP6T_SO_GET_REVISION_TARGET(r1, 0x29, 0x45, &(0x7f00000003c0)={'icmp6\x00'}, &(0x7f0000000480)=0x1e)
getsockname$packet(r1, &(0x7f0000000440), &(0x7f0000000400)=0x14)
setsockopt$inet6_udp_encap(r0, 0x11, 0x64, &(0x7f0000000040)=0x2, 0x4)
syz_emit_ethernet(0xbe, &(0x7f0000000000)={@dev={'\xaa\xaa\xaa\xaa\xaa', 0x23}, @link_local, @void, {@ipv4={0x800, @udp={{0x5, 0x4, 0x0, 0x0, 0xb0, 0x0, 0x0, 0x0, 0x11, 0x0, @empty, @empty}, {0x0, 0x4e20, 0x9c, 0x0, @wg=@initiation={0x1, 0x0, "7b4b143b7461fd777b1c012bd14efb9f49fcdb8f080c26a04883ad5c8c82b8af", "584cbf2649a50f2dbc43efa8698d0a881c51852e4451b57d037ad3c045942824251d7d17b5191584bcd4fbe40a23424d", "bcfd56f1375461caaa2f19935e6996c7096ffeeb0300000000000064", {"9a3bfbc1d19cb307b3472ab9cdb042d2", "643fcbb2c5a57df67d544af6e8dafe09"}}}}}}}, 0x0)
r2 = bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000140)={0x6, 0x3, &(0x7f0000000680)=ANY=[@ANYBLOB="1800000002000000000000000000000095"], 0x0, 0x3, 0x0, 0x0, 0x41000}, 0x94)
bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000200)={0x6, 0x3, &(0x7f0000000680)=ANY=[], &(0x7f00000002c0)='syzkaller\x00', 0x7, 0x0, 0x0, 0x0, 0x4}, 0x94)
r3 = socket$nl_netfilter(0x10, 0x3, 0xc)
r4 = socket(0x2, 0x80805, 0x0)
getsockopt$inet_sctp6_SCTP_SOCKOPT_CONNECTX3(r4, 0x84, 0x6f, &(0x7f0000000000)={0x0, 0x10, &(0x7f00000010c0)=[@in={0x2, 0x1000, @initdev={0xac, 0x1e, 0x0, 0x0}}]}, &(0x7f0000000180)=0x10)
setsockopt$IP_VS_SO_SET_ADDDEST(r4, 0x0, 0x487, &(0x7f0000000000)={{0x84, @broadcast, 0x4e20, 0x3, 'lc\x00', 0x5, 0x8, 0x77}, {@remote, 0x4e20, 0x1, 0xce, 0x40000000}}, 0x44)
getsockopt$bt_hci(r4, 0x84, 0x11, &(0x7f0000000000)=""/4102, &(0x7f0000001040)=0x1006)
sendmsg$NFT_BATCH(r3, &(0x7f000000c2c0)={0x0, 0x0, &(0x7f0000000200)={&(0x7f00000007c0)=ANY=[@ANYBLOB="140000001000010000000000000000000000000a28000000000a0101000000005e1affd5020000000900010073797a300000000008000240000000032c000000030a01030000e6ff00000000020000000900010073797a30000000000900030073797a320000000014000000110001"], 0x7c}, 0x1, 0x0, 0x0, 0x40}, 0x0)
sendmsg$NFT_BATCH(r3, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000900)=ANY=[@ANYBLOB="140000001000010000000000000000000000000a2c000000060a0b040000000000000000020000000900010073797a30000000000900020073797a320000000014000000110001"], 0x54}}, 0x0)
sendmsg$NFT_BATCH(r3, &(0x7f0000000340)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000300)={{0x8001}, [], {0x14, 0x11, 0x1, 0x0, 0x0, {0x3}}}, 0x28}, 0x1, 0x0, 0x0, 0x80000}, 0x801)
bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000600)={r2, 0x5, 0x1, 0x0, &(0x7f0000000000)='%', 0x0, 0xd00, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2}, 0x50)
r5 = socket$inet(0x2, 0x3, 0x6)
ioctl$sock_ipv4_tunnel_SIOCADDTUNNEL(r5, 0x89f1, &(0x7f0000001040)={'gre0\x00', &(0x7f0000000380)={'syztnl2\x00', 0x0, 0x2100, 0x80, 0xfffffffb, 0xfffffffc, {{0x5, 0x4, 0x0, 0x9, 0x14, 0x68, 0x0, 0x1, 0x2f, 0x0, @dev={0xac, 0x14, 0x14, 0x14}, @loopback}}}})
r6 = socket$l2tp(0x2, 0x2, 0x73)
bind$inet(r6, &(0x7f00000002c0)={0x2, 0x4e20, @initdev={0xac, 0x1e, 0x1, 0x0}}, 0x10)
connect$inet(r6, &(0x7f0000000200)={0x2, 0x0, @local}, 0x10)
recvmmsg(0xffffffffffffffff, &(0x7f0000005280)=[{{0x0, 0x0, &(0x7f0000000180)=[{&(0x7f0000001d40)=""/61, 0x3d}, {0x0}], 0x2}, 0x1000d}], 0x1, 0x2001, 0x0)
sendmmsg$inet(r6, &(0x7f0000000900)=[{{0x0, 0x0, 0x0}}], 0x40000cf, 0x0)

1.440828344s ago: executing program 1 (id=3156):
bpf$BPF_PROG_ATTACH(0x8, &(0x7f00000000c0)={@fallback, 0xffffffffffffffff, 0x10, 0x2000}, 0x20) (async)
bpf$MAP_UPDATE_BATCH(0x1a, &(0x7f00000012c0)={&(0x7f0000000000)="df42089eb5b9d2", &(0x7f0000000100)=""/4096, &(0x7f0000001100)="ffb9a853dc615e5af1f3344de1ebfa3a947378b9a34a9a17db06e1d4f294846c9536ca582a1993e4fb571af26d5e491383920048e87b9235d8b114dde9c8d818ac13d641a139dd836570efa3f86dbdcddcae0293c84ed553c9d5bfca0c0360db14cf98f283d37a9abca37de8d34c943c3013c9cf94f0eb61888d09ad0c6b173185fcce06fd08fd60c4f4951d2a12cd485d46d2de8a1eb117a025bad871501052de19c09e2754a7160dd204f75b8b4b009061ef39a63ba96549dfa44d6f13ba9b5ab3cb7fdd7676231dd299977879f0383a8478dc2e975940", &(0x7f0000001200)="62474d6102cb2628ef4183432307f504ad70305713dc0704117ce7d32b76d86e92c432613669418cec2769e7735db1ef065e25751ec59de89b990f8bfc1d71436e8b983b011092d1ba60372875f567a692dcabd531bc03c8c6012ab0ee1c22b8307eacfba90caa62bc03bf9d9de9a53268d74a3f01f9e80807c45c5f9a582647a9b7b3211e605eafd48ebdac66c88e1eb3d5d2219203afe85ee6f88810d2a144f490c4a10868eba6744d47d0a74a0b5a30d476", 0x8, 0xffffffffffffffff, 0x4}, 0x38)

1.323068253s ago: executing program 0 (id=3157):
r0 = socket$inet6_sctp(0xa, 0x5, 0x84)
setsockopt(r0, 0x84, 0x81, &(0x7f00000002c0)="1a00000002000000", 0x8)
setsockopt$inet_sctp_SCTP_SOCKOPT_BINDX_ADD(r0, 0x84, 0x64, &(0x7f0000000000)=[@in6={0xa, 0x4e23, 0x0, @loopback}], 0x1c)
setsockopt$inet_sctp6_SCTP_AUTH_CHUNK(r0, 0x84, 0x15, &(0x7f0000000080), 0x1)
mkdirat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000)='./cgroup/syz0\x00', 0x1ff)
r1 = openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000), 0x200002, 0x0)
r2 = openat$cgroup_pressure(r1, &(0x7f0000000040)='io.pressure\x00', 0x2, 0x0)
write$cgroup_pressure(r2, &(0x7f0000000080)={'some', 0x20, 0x2000000008, 0x20, 0x10000000fffff}, 0x2f)
close(0x4)
r3 = bpf$ITER_CREATE(0xb, &(0x7f0000000100), 0x0)
close(r3)
setsockopt$inet6_tcp_TCP_MD5SIG(r3, 0x6, 0xe, &(0x7f0000000400)={@in={{0x2, 0x4e24, @remote}}, 0x0, 0x0, 0x23, 0x0, "2c004a46dc15cf29250d4ac91f4f1fb55e5961fe20187d3f548a717f53c4c278903462d20a1536d3e0dbebbed8a4146dfa98c40d4175e09fb5855304905f35f5789457049d1eb4f48635594016249d12"}, 0xd8)
syz_emit_ethernet(0x0, 0x0, 0x0)
syz_init_net_socket$bt_l2cap(0x1f, 0x3, 0x3)
sendmsg$ETHTOOL_MSG_COALESCE_SET(0xffffffffffffffff, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000100)=ANY=[@ANYBLOB='D\x00\x00\x00', @ANYRES16, @ANYBLOB="010000000000000000001400000018"], 0x44}}, 0x0)
r4 = openat$cgroup_root(0xffffffffffffff9c, 0x0, 0x200002, 0x0)
openat$cgroup_ro(r4, &(0x7f00000000c0)='blkio.bfq.idle_time\x00', 0x0, 0x0)
sendmsg$NFT_BATCH(0xffffffffffffffff, 0x0, 0x40)
r5 = socket$inet_udp(0x2, 0x2, 0x0)
bind$inet(r5, &(0x7f0000000100)={0x2, 0x0, @dev={0xac, 0x14, 0x14, 0x42}}, 0x10)
connect$inet(r5, &(0x7f0000000040)={0x2, 0x0, @multicast1}, 0x10)
sendmmsg$inet(r5, &(0x7f0000004d00)=[{{0x0, 0x6000, 0x0, 0x0, 0x0, 0x0, 0x30000}}], 0x400000000000284, 0xf00)
r6 = syz_init_net_socket$bt_l2cap(0x1f, 0x3, 0x3)
ioctl$FS_IOC_GETFSLABEL(r6, 0x400452c8, &(0x7f0000000100))
ioctl$FS_IOC_GETFSLABEL(r5, 0x400452c9, &(0x7f0000000500))
bpf$PROG_LOAD(0x5, &(0x7f00000054c0)={0x39, 0x0, 0x0, &(0x7f0000000100)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x2c}, 0x94)
sendto$inet6(r0, &(0x7f0000000040), 0x0, 0x0, &(0x7f0000000100)={0xa, 0x4e23, 0x0, @loopback}, 0x1c)
socket$nl_generic(0x10, 0x3, 0x10)
socket$netlink(0x10, 0x3, 0x0)
socket$inet_icmp(0x2, 0x2, 0x1)

1.322338322s ago: executing program 2 (id=3158):
r0 = socket$inet6_sctp(0xa, 0x5, 0x84)
shutdown(r0, 0x0)
getsockopt$inet_sctp6_SCTP_SOCKOPT_CONNECTX3(r0, 0x84, 0x6f, &(0x7f0000000000)={<r1=>0x0, 0x10, &(0x7f00000002c0)=[@in={0x2, 0x0, @local}]}, &(0x7f0000000440)=0x10)
getsockopt$inet_sctp6_SCTP_SOCKOPT_PEELOFF(r0, 0x84, 0x83, &(0x7f0000000800)={r1, 0x1}, &(0x7f0000000840)=0x8)
r2 = socket$igmp6(0xa, 0x3, 0x3a)
setsockopt$MRT6_ADD_MFC(r2, 0x29, 0x22, &(0x7f0000000080)={{0xa, 0x0, 0x10000, @private2}, {0xa, 0x0, 0x0, @dev, 0x20000}, 0x0, {[0x0, 0x0, 0x0, 0x0, 0x0, 0x1]}}, 0x5c)

1.319064807s ago: executing program 3 (id=3159):
mmap(&(0x7f0000200000/0x4000)=nil, 0x4000, 0x4, 0x200000006c832, 0xffffffffffffffff, 0x0) (async, rerun: 32)
r0 = socket(0x40000000015, 0x5, 0x0) (rerun: 32)
connect$inet(r0, &(0x7f0000000040)={0x2, 0x4e20, @broadcast}, 0x10)
bind$inet(r0, &(0x7f0000000340)={0x2, 0x4e20, @loopback}, 0x57) (async)
recvmmsg(r0, &(0x7f0000001740)=[{{0x0, 0x0, &(0x7f0000001400)=[{&(0x7f0000000400)=""/4096, 0x10c4}], 0x1}}], 0x4000210, 0x2, 0x0)
setsockopt$SO_TIMESTAMP(r0, 0x1, 0x40, &(0x7f00000000c0)=0xfd, 0x4) (async)
sendmsg$NFT_BATCH(r0, &(0x7f0000000300)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000080)=ANY=[], 0xc4}, 0x1, 0x0, 0x0, 0x20000000}, 0x0) (async, rerun: 64)
sendto$inet6(0xffffffffffffffff, 0x0, 0x0, 0xbcff, 0x0, 0x0) (rerun: 64)
ioctl$sock_SIOCGIFINDEX(0xffffffffffffffff, 0x8933, &(0x7f0000000300)={'xfrm0\x00', <r1=>0x0}) (async)
r2 = socket$key(0xf, 0x3, 0x2)
sendmsg$key(0xffffffffffffffff, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000040)={0x0}}, 0x0) (async, rerun: 64)
sendmsg$key(0xffffffffffffffff, &(0x7f0000000200)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000080)=ANY=[@ANYBLOB="020a040007000000b6f1ffff0000854105001a"], 0x38}}, 0x0) (async, rerun: 64)
sendmsg$key(0xffffffffffffffff, &(0x7f00000001c0)={0x40000000, 0x0, &(0x7f0000000040)={&(0x7f0000000280)=ANY=[@ANYBLOB="020100090e000000030000000000000405000600000000000a0000000000000400000000000000000000002100000000000100000000000002000100010000000000010200fd000005000500000000000a"], 0x70}}, 0x0) (async)
sendmmsg(r2, &(0x7f0000000180), 0x3ef, 0x0) (async)
ioctl$F2FS_IOC_RELEASE_COMPRESS_BLOCKS(r0, 0x8008f512, &(0x7f0000000140))
getsockname$llc(r0, &(0x7f0000000380)={0x1a, 0x0, 0x0, 0x0, 0x0, 0x0, @link_local}, &(0x7f00000003c0)=0x10) (async)
setsockopt$inet6_mreq(0xffffffffffffffff, 0x29, 0x1b, &(0x7f0000000000)={@remote, r1}, 0x14) (async, rerun: 64)
r3 = socket$packet(0x11, 0x2, 0x300) (async, rerun: 64)
r4 = socket$nl_generic(0x10, 0x3, 0x10) (async)
r5 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000280), 0xffffffffffffffff) (async)
r6 = socket$kcm(0x10, 0x2, 0x0)
sendmsg$inet(r6, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000100)=[{&(0x7f0000000480)="5c00000012006bab9a3fe3d86e17aa0b046b876c1d0048380019001931a0e69ee517d34460bc06000000a701251e6182949a3651f60a84c9f4d4938037e70e4509c51c2688110000000000000000000025", 0x51}], 0x1, 0x0, 0x0, 0x1f00c00e}, 0x0) (async, rerun: 64)
recvmsg$kcm(r6, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000180)}, 0x0) (async, rerun: 64)
ioctl$sock_SIOCGIFINDEX_80211(r3, 0x8933, &(0x7f0000000340)={'wlan0\x00', <r7=>0x0})
sendmsg$NL80211_CMD_JOIN_MESH(r4, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000240)={&(0x7f0000000100)={0x24, r5, 0x1, 0x70bd2b, 0x25dddbff, {{}, {@val={0x8, 0x3, r7}, @void}}, [@NL80211_ATTR_BSS_BASIC_RATES={0x4}, @NL80211_ATTR_SOCKET_OWNER={0x4}]}, 0x24}, 0x1, 0x0, 0x0, 0x85}, 0x4c040) (async)
r8 = socket$nl_route(0x10, 0x3, 0x0)
sendmsg$nl_route(r8, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000840)={&(0x7f0000000c40)=ANY=[@ANYBLOB="580000001000010400000000000000000000ffff", @ANYRES32=0x0, @ANYBLOB="00000000da44000024001a8020000a8014000700fe8000000000000000020040000000000500080002000000140003007866726d30"], 0x58}, 0x1, 0x0, 0x0, 0x20000050}, 0x0) (async)
bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="0e0000"], 0x48) (async)
syz_emit_ethernet(0x32, 0x0, 0x0)
socket$nl_route(0x10, 0x3, 0x0)

74.893779ms ago: executing program 1 (id=3160):
r0 = socket$inet_sctp(0x2, 0x1, 0x84)
r1 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000080)='cgroup.controllers\x00', 0x275a, 0x0)
mkdirat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000)='./cgroup.cpu/syz1\x00', 0x1ff)
write$tun(r1, &(0x7f0000000000)=ANY=[], 0x38)
mmap(&(0x7f0000000000/0x3000)=nil, 0x3000, 0x1, 0x10012, r1, 0x0)
openat$tun(0xffffffffffffff9c, &(0x7f0000000000), 0x4000, 0x0)
setsockopt$IP_VS_SO_SET_ADD(r0, 0x0, 0x482, &(0x7f0000000040)={0x84, @dev={0xac, 0x14, 0x14, 0xb}, 0x15, 0x3, 'lc\x00', 0x1, 0x4, 0x8}, 0x2c)
r2 = socket$kcm(0xa, 0x2, 0x0)
sendmsg$sock(r2, &(0x7f0000000400)={&(0x7f0000000580)=@in6={0x2, 0x4e22, 0x0, @dev}, 0x80, 0x0, 0x0, &(0x7f0000000000)=[@mark={{0x14, 0x1, 0x24, 0x3}}], 0x18}, 0x0)
syz_80211_inject_frame(0x0, 0x0, 0x0)

72.45317ms ago: executing program 2 (id=3161):
r0 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000580)={0x3, 0xc, &(0x7f0000000140)=@framed={{0x18, 0x2, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0xffffffff}, [@call={0x85, 0x0, 0x0, 0xe}, @printk={@p, {}, {}, {}, {}, {0x7, 0x0, 0xb, 0x3, 0x0, 0x0, 0x2}, {0x85, 0x0, 0x0, 0x17}}]}, &(0x7f0000000000)='syzkaller\x00', 0x2, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffd1}, 0x94)
r1 = bpf$MAP_CREATE_RINGBUF(0x0, &(0x7f0000000040)={0x1b, 0x0, 0x0, 0x7ff, 0x0, 0xffffffffffffffff, 0x100, '\x00', 0x0, 0xffffffffffffffff, 0x5, 0x1, 0x1}, 0x50) (async)
ioctl$XFS_IOC_PATH_TO_HANDLE(r0, 0xc0385869, &(0x7f0000000280)={<r2=>r0, &(0x7f00000000c0)='i{{(\x00', 0x480c80, &(0x7f00000001c0)={@align=0x1, {0x2, 0x6, 0x80000001, 0x1}}, 0x8, &(0x7f0000000200)={@_ha_fsid}, &(0x7f0000000240)=0x7}) (async)
bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, &(0x7f00000003c0)={{0xffffffffffffffff, <r3=>0xffffffffffffffff}, &(0x7f0000000340), &(0x7f0000000380)=r0}, 0x20) (async, rerun: 32)
r4 = socket$alg(0x26, 0x5, 0x0) (rerun: 32)
bind$alg(r4, &(0x7f00000002c0)={0x26, 'skcipher\x00', 0x0, 0x0, 'lrw(serpent)\x00'}, 0x58) (async)
setsockopt$ALG_SET_KEY(r4, 0x117, 0x1, &(0x7f00000000c0)="3638412c0107cc651c69315bb104e4f1", 0x10)
setsockopt$ALG_SET_KEY(r4, 0x117, 0x1, &(0x7f0000000280)="ad56b6c5820fae9d6dcd3292ea54c7be", 0x10)
r5 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10)
syz_genetlink_get_family_id$nfc(&(0x7f0000000540), r5)
ioctl$ifreq_SIOCGIFINDEX_batadv_hard(0xffffffffffffffff, 0x8933, &(0x7f00000006c0)={'batadv_slave_0\x00', <r6=>0x0})
ioctl$XFS_IOC_GETBMAPX(r1, 0xc0205838, &(0x7f0000000740)={0xea, 0xfffffffffffffffa, 0x8, 0x9, 0x8, 0x10}) (async)
bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f00000007c0)={0x18, 0x1b, &(0x7f0000000400)=@ringbuf={{0x18, 0x0, 0x0, 0x0, 0xfcd, 0x0, 0x0, 0x0, 0xb8}, {{0x18, 0x1, 0x1, 0x0, r1}}, {}, [@map_val={0x18, 0x8, 0x2, 0x0, r2, 0x0, 0x0, 0x0, 0xb}, @generic={0x80, 0x0, 0xa, 0x2, 0x8000}, @ringbuf_output={{0x18, 0x1, 0x1, 0x0, r3}, {0x7, 0x0, 0xb, 0x8, 0x0, 0x0, 0x6}, {}, {}, {}, {}, {0x7, 0x0, 0xb, 0x4, 0x0, 0x0, 0x2}}], {{}, {0x7, 0x0, 0xb, 0x2, 0x0, 0x0, 0x1}, {0x85, 0x0, 0x0, 0x85}}}, &(0x7f0000000500)='syzkaller\x00', 0xf, 0x5e, &(0x7f0000000640)=""/94, 0x41100, 0x54, '\x00', r6, 0x0, 0xffffffffffffffff, 0x8, &(0x7f0000000700)={0x4, 0x5}, 0x8, 0x10, 0x0, 0x0, 0x0, 0x0, 0x4, &(0x7f0000000740), &(0x7f0000000780)=[{0x5, 0x4, 0xb, 0x6}, {0x1, 0x3, 0x3, 0xb}, {0x0, 0x1, 0xc, 0x1}, {0x3, 0x3, 0x0, 0x9}], 0x10, 0x8}, 0x94)
bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f00000002c0)={r0, 0x0, 0xe, 0x0, &(0x7f0000000100)="e0b9547ed387dbe9abc89b6f5bec", 0x0, 0x8, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x50)

71.556945ms ago: executing program 3 (id=3162):
socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000000)={<r0=>0xffffffffffffffff})
r1 = socket$nl_netfilter(0x10, 0x3, 0xc)
r2 = socket(0x10, 0x3, 0xc)
r3 = openat$tun(0xffffffffffffff9c, &(0x7f0000000100), 0x0, 0x0)
ioctl$TUNSETIFF(r3, 0x400454ca, 0x0)
mmap(&(0x7f0000000000/0xfbe000)=nil, 0xfbe000, 0x9, 0x31, 0xffffffffffffffff, 0xf67d000)
r4 = socket$inet_tcp(0x2, 0x1, 0x0)
getsockopt$inet_tcp_buf(r4, 0x6, 0x21, 0x0, &(0x7f0000000580))
ioctl$sock_SIOCGIFINDEX(0xffffffffffffffff, 0x8933, &(0x7f0000000100)={'syzkaller0\x00'})
sendmmsg(0xffffffffffffffff, 0x0, 0x0, 0x0)
r5 = socket$netlink(0x10, 0x3, 0x400000000000004)
r6 = socket$xdp(0x2c, 0x3, 0x0)
setsockopt$XDP_UMEM_REG(r6, 0x11b, 0x4, &(0x7f0000000080)={&(0x7f0000000000)=""/5, 0x214000, 0x800}, 0x20)
setsockopt$XDP_TX_RING(r6, 0x11b, 0x3, &(0x7f0000000180)=0x800, 0x4)
r7 = socket$tipc(0x1e, 0x2, 0x0)
setsockopt$XDP_UMEM_COMPLETION_RING(r6, 0x11b, 0x6, &(0x7f00000000c0)=0x20000, 0x4)
ioctl$sock_SIOCGIFINDEX(r7, 0x8933, &(0x7f0000000400)={'dummy0\x00', <r8=>0x0})
setsockopt$XDP_UMEM_FILL_RING(r6, 0x11b, 0x5, &(0x7f0000000140)=0x4000, 0x4)
bind$xdp(r6, &(0x7f0000000100)={0x2c, 0x0, r8}, 0x10)
r9 = socket$kcm(0x10, 0x2, 0x0)
sendmsg$kcm(r9, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000080)=[{&(0x7f0000000040)="2e00000011008188040f46ecdb4cb9cca7480e1211000000e3bd012a128748b429021627e305dd2b7a146efb4400", 0x2e}], 0x1}, 0x4048004)
writev(r5, &(0x7f0000000100)=[{&(0x7f0000000200)="480000001400190d7ebdeb75fd0d8c562c84d8c033ed7a80ffe0090f000060000000a2bc5603ca00000f7f89000000200000004a2471083ec6991778581acb6c0101ff0000000309", 0x48}], 0x1)
write(r2, &(0x7f0000000040)="effd00001000ff00fd4344c007110000", 0x10)
socketpair$tipc(0x1e, 0x1, 0x0, &(0x7f0000000000))
sendmsg$IPSET_CMD_ADD(r1, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000240)={&(0x7f00000001c0)=ANY=[@ANYBLOB="540000000b0601080000000000000000020000000900020073797a310000000005000100070000002c000780060004404e21000005000700110000000c000180080001407f0000010c000280"], 0x54}, 0x1, 0x0, 0x0, 0x10004893}, 0x80)
sendmsg$NFNL_MSG_ACCT_DEL(r1, &(0x7f0000000140)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x80}, 0xc, &(0x7f0000000100)={&(0x7f0000000040)={0x84, 0x3, 0x7, 0x101, 0x0, 0x0, {0x0, 0x0, 0x7}, [@NFACCT_QUOTA={0xc, 0x6, 0x1, 0x0, 0xf}, @NFACCT_FLAGS={0x8, 0x5, 0x1, 0x0, 0x1}, @NFACCT_NAME={0x9, 0x1, 'syz0\x00'}, @NFACCT_FLAGS={0x8, 0x5, 0x1, 0x0, 0x1}, @NFACCT_FILTER={0x3c, 0x7, 0x0, 0x1, [@NFACCT_FILTER_VALUE={0x8}, @NFACCT_FILTER_MASK={0xfffffffffffffd03, 0x1, 0x1, 0x0, 0x5}, @NFACCT_FILTER_MASK={0x8, 0x1, 0x1, 0x0, 0x2}, @NFACCT_FILTER_MASK={0x8, 0x1, 0x1, 0x0, 0x9}, @NFACCT_FILTER_VALUE={0x8, 0x2, 0x1, 0x0, 0x7b4}, @NFACCT_FILTER_MASK={0x8, 0x1, 0x1, 0x0, 0x7ff}, @NFACCT_FILTER_VALUE={0x8, 0x2, 0x1, 0x0, 0x4}]}, @NFACCT_BYTES={0xc, 0x3, 0x1, 0x0, 0xffff}]}, 0x84}, 0x1, 0x0, 0x0, 0x4000}, 0x40000)
ioctl$sock_SIOCINQ(r0, 0x541b, &(0x7f00000000c0))

70.780908ms ago: executing program 2 (id=3163):
socket$inet_icmp_raw(0x2, 0x3, 0x1) (async)
syz_init_net_socket$bt_hci(0x1f, 0x3, 0x5) (async)
r0 = socket$nl_netfilter(0x10, 0x3, 0xc) (async)
syz_open_procfs$namespace(0x0, &(0x7f0000000200)='ns/pid_for_children\x00')
sendmsg$nl_route_sched(0xffffffffffffffff, 0x0, 0x2004c8d8)
sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000280)={&(0x7f0000000180)=@newqdisc={0x24, 0x24, 0x1, 0x70bd2a, 0x25dfdbfe, {0x0, 0x0, 0x0, 0x0, {}, {0xffff, 0xffff}, {0x5}}}, 0x24}, 0x1, 0x0, 0x0, 0x40}, 0x0) (async)
sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000240)={&(0x7f0000000100)=@newqdisc={0x3c, 0x24, 0x4, 0xc0000000, 0x0, {0x0, 0x0, 0x0, 0x0, {0x3}, {0xa, 0xe}, {0x0, 0x9}}, [@qdisc_kind_options=@q_fq_pie={{0xb}, {0xc, 0x8002, [@TCA_FQ_PIE_TARGET={0x8, 0x3, 0x4}]}}]}, 0x3c}}, 0x20004055) (async)
sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000300)={0x0, 0x0, &(0x7f0000000080)={0x0, 0x48}, 0x1, 0x0, 0x0, 0x10}, 0x0)
r1 = socket$igmp6(0xa, 0x3, 0x2) (async)
r2 = socket$packet(0x11, 0x3, 0x300)
ioctl$sock_SIOCGIFINDEX(r2, 0x8933, &(0x7f0000000080)={'ip6tnl0\x00', <r3=>0x0})
ioctl$sock_inet6_SIOCADDRT(r1, 0x890b, &(0x7f00000005c0)={@dev={0xfe, 0x80, '\x00', 0x41}, @private1, @remote, 0x5, 0x2, 0x2, 0x400, 0xb7, 0x4c20020, r3}) (async)
unshare(0x22020600) (async)
syz_emit_ethernet(0x76, &(0x7f0000000640)={@broadcast, @dev={'\xaa\xaa\xaa\xaa\xaa', 0x80}, @void, {@ipv6={0x86dd, @icmpv6={0x0, 0x6, "f53a04", 0x40, 0x3a, 0x0, @remote, @mcast2, {[], @param_prob={0x2, 0x0, 0x0, 0x500, {0x0, 0x6, '\x00', 0x40, 0x0, 0xff, @mcast1, @private2, [@hopopts={0x3a}], "f4c638bed6f068cc"}}}}}}}, 0x0) (async)
bpf$PROG_LOAD(0x5, 0x0, 0x0) (async)
write(0xffffffffffffffff, 0x0, 0x0) (async)
recvmmsg(0xffffffffffffffff, &(0x7f0000005c80), 0x0, 0x10122, 0x0) (async)
socket$nl_generic(0x10, 0x3, 0x10)
socket$packet(0x11, 0x3, 0x300) (async)
r4 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000000)='freezer.parent_freezing\x00', 0x275a, 0x0)
ioctl$FS_IOC_SETFLAGS(r4, 0x40086602, &(0x7f0000000040)=0x40)
mmap(&(0x7f0000537000/0x3000)=nil, 0x3000, 0x4, 0x100010, r4, 0x12504000)
syz_emit_ethernet(0x42, &(0x7f00000002c0)={@multicast, @empty, @void, {@ipv6={0x86dd, @udp={0x0, 0x6, "76b2af", 0xc, 0x2f, 0x0, @private0, @private1={0xfc, 0x1, '\x00', 0x1}, {[], {0x0, 0x883e, 0xc, 0x0, @gue={{0x1, 0x0, 0x0, 0x0, 0x0, @void}}}}}}}}, 0x0) (async)
bpf$BPF_BTF_LOAD(0x12, &(0x7f00000000c0)={&(0x7f0000000000)=ANY=[@ANYBLOB="9feb010018000000000000002c0000002c00000002000000000000000000000b00000000000000000100000c"], 0x0, 0x46, 0x0, 0xa}, 0x28)
sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000340)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000100)=ANY=[@ANYBLOB="500000001000010425bbe5ad600027842cf52300", @ANYRES32=0x0, @ANYBLOB="0300000000000000280012800a00010076786c616e00"], 0x50}, 0x1, 0x0, 0x0, 0x13d33d22e8a65c15}, 0x4008840) (async)
r5 = socket$netlink(0x10, 0x3, 0x0)
sendmmsg(r5, &(0x7f00000002c0), 0x40000000000009f, 0x0)
sendmsg$IPCTNL_MSG_TIMEOUT_DEFAULT_GET(r0, &(0x7f0000000440)={&(0x7f0000000040)={0x10, 0x0, 0x0, 0x800}, 0xc, &(0x7f0000000400)={&(0x7f0000000380)={0x60, 0x4, 0x8, 0x201, 0x0, 0x0, {0x0, 0x0, 0x4}, [@CTA_TIMEOUT_L3PROTO={0x6, 0x2, 0x1, 0x0, 0x805}, @CTA_TIMEOUT_L4PROTO={0x5, 0x3, 0x11}, @CTA_TIMEOUT_DATA={0x34, 0x4, 0x0, 0x1, @icmpv6=[@CTA_TIMEOUT_ICMPV6_TIMEOUT={0x8, 0x1, 0x1, 0x0, 0x6}, @CTA_TIMEOUT_ICMPV6_TIMEOUT={0x8, 0x1, 0x1, 0x0, 0x7c55}, @CTA_TIMEOUT_ICMPV6_TIMEOUT={0x8, 0x1, 0x1, 0x0, 0x1}, @CTA_TIMEOUT_ICMPV6_TIMEOUT={0x8, 0x1, 0x1, 0x0, 0x725}, @CTA_TIMEOUT_ICMPV6_TIMEOUT={0x8, 0x1, 0x1, 0x0, 0x3b2}, @CTA_TIMEOUT_ICMPV6_TIMEOUT={0x8, 0x1, 0x1, 0x0, 0x10}]}, @CTA_TIMEOUT_L3PROTO={0x6, 0x2, 0x1, 0x0, 0x88f8}]}, 0x60}, 0x1, 0x0, 0x0, 0x10}, 0x10)

65.102601ms ago: executing program 0 (id=3164):
r0 = socket$nl_generic(0x10, 0x3, 0x10)
r1 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000080), 0xffffffffffffffff)
r2 = socket$inet_tcp(0x2, 0x1, 0x0)
ioctl$sock_SIOCGIFINDEX(r2, 0x8933, &(0x7f0000000180)={'syz_tun\x00', <r3=>0x0})
r4 = bpf$MAP_CREATE(0x0, &(0x7f00000003c0)=ANY=[@ANYBLOB="09000000060000000800000008"], 0x50)
bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x0, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r4, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000000300000095"], 0x0, 0xffbfffff, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x30, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94)
bpf$MAP_UPDATE_BATCH(0x1a, &(0x7f0000000380)={0x0, 0x0, &(0x7f0000000040), &(0x7f00000004c0), 0xce, r4}, 0x38)
r5 = bpf$PROG_LOAD(0x5, &(0x7f0000000740)={0x6, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000800)='GPL\x00', 0x0, 0x0, 0x0, 0x40f00, 0x0, '\x00', 0x0, @fallback=0x2, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94)
bpf$BPF_LINK_CREATE_XDP(0x1c, &(0x7f0000000000)={r5, r3, 0x25, 0x0, @void}, 0x10)
syz_emit_ethernet(0x66, &(0x7f00000002c0)={@local, @broadcast, @void, {@ipv6={0x86dd, @icmpv6={0x0, 0x6, "12aafc", 0x30, 0x3a, 0xff, @remote, @local, {[], @time_exceed={0x3, 0x0, 0x0, 0x8, '\x00', {0x6, 0x6, "32f5aa", 0x3, 0x33, 0x1, @mcast2, @dev={0xfe, 0x80, '\x00', 0x32}}}}}}}}, 0x0)
sendmsg$NL80211_CMD_FRAME(r0, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000380)={&(0x7f0000000100)={0x28, r1, 0x1, 0x70bd25, 0x0, {{0x2}, {@val={0x8}, @val={0xc, 0x99, {0x1, 0x55}}}}}, 0x28}, 0x1, 0x0, 0x0, 0x4c854}, 0x20040880)

64.453219ms ago: executing program 2 (id=3165):
syz_emit_ethernet(0x3ae, &(0x7f0000000940)=ANY=[@ANYBLOB="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"], 0x0)
r0 = openat$cgroup_ro(0xffffffffffffffff, &(0x7f0000000000)='hugetlb.2MB.rsvd.usage_in_bytes\x00', 0x0, 0x0)
write$tun(r0, &(0x7f0000000040)={@val={0x0, 0x88e7}, @void, @x25={0x2, 0xe2, 0x13, "971b9d6648f480a7f195254c87c3e21fd12fa617cc39de6f26541ceb49f6c2aa4a67b9da525d4f52dfbba08da189dd53599f415d24133fafa0196169ce10a5b0742b0b3a27f62f6e18c64f9daf1250e7edd3d3671944605cb20e0f84b5968ba3f8ca4038bba9453fe782f185195fdc63219053078147f2785f81755dc31b7d72d5bf8e42937ee462388f4391b57b2b64718c872931ea55a0e0c3934dcddf2ea8e9c5c11f17f8c402920f180e5c373e13293068d5da1845f2bfac41c721cd99e85ab8c67c3c0017effe6eae1306affe7ba97d55f4e409d59ebe2da0f70de4284925122e90df4f90fd2310"}}, 0xf1)

63.862276ms ago: executing program 3 (id=3166):
r0 = socket$netlink(0x10, 0x3, 0x0)
sendmsg$nl_route_sched(r0, &(0x7f0000000100)={0x0, 0x0, &(0x7f0000005c00)={&(0x7f0000000000)=@newtaction={0xa0, 0x30, 0x9, 0x0, 0x0, {}, [{0x8c, 0x1, [@m_bpf={0x88, 0x1, 0x0, 0x0, {{0x8}, {0x60, 0x2, 0x0, 0x1, [@TCA_ACT_BPF_OPS_LEN={0x6, 0x3, 0x7}, @TCA_ACT_BPF_OPS={0x3c, 0x4, [{0x35, 0x0, 0x1, 0xb1000000}, {0x44}, {0x3}, {}, {}, {}, {0x6}]}, @TCA_ACT_BPF_PARMS={0x18}]}, {0x4}, {0xc}, {0xc}}}]}]}, 0xa0}}, 0x0) (async)
r1 = openat$tcp_congestion(0xffffffffffffff9c, &(0x7f0000000000), 0x35c, 0x0)
preadv(r1, &(0x7f00000013c0), 0x0, 0x5, 0x45)

61.188702ms ago: executing program 2 (id=3167):
r0 = bpf$MAP_CREATE(0x100000000000000, &(0x7f00000001c0)=ANY=[@ANYBLOB="1400000004000000080000000600000000000000", @ANYRES32, @ANYRES16, @ANYRES32=0x0, @ANYRES32, @ANYBLOB='\x00'/28], 0x50)
socket(0x10, 0x80002, 0x0)
bpf$BPF_BTF_LOAD(0x12, &(0x7f0000000040)={&(0x7f00000004c0)=ANY=[@ANYRESHEX=r0], 0x0, 0x81, 0x0, 0x0, 0x7fffffff}, 0x28)
bpf$MAP_UPDATE_BATCH(0x1a, &(0x7f0000000000)={0x0, 0x0, 0x0, &(0x7f0000000540)="65652bd1c1cb9acf4b7432cc78ae6e98c64d09090fb090715a76590a3e93ba762b1732aff2b26059b76b216c81eca19a3a182f0f25662907799b65c66be67a6ddec9e972df252e4c3fa2167a852d08668d2e1b3e214a", 0x0, r0, 0x4}, 0x38)
r1 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000940)='hugetlb.2MB.usage_in_bytes\x00', 0x26e1, 0x0)
r2 = socket$inet6(0xa, 0x2, 0x0)
sendmsg$IPVS_CMD_SET_INFO(0xffffffffffffffff, &(0x7f0000000b00)={0x0, 0x0, 0x0}, 0x0)
r3 = syz_init_net_socket$bt_l2cap(0x1f, 0x2, 0x0)
connect$bt_l2cap(r3, &(0x7f0000000080)={0x1f, 0x0, @fixed={'\xaa\xaa\xaa\xaa\xaa', 0x10}, 0x7ff}, 0xe)
sendmsg$NL802154_CMD_NEW_SEC_KEY(0xffffffffffffffff, &(0x7f00000003c0)={0x0, 0x0, 0x0}, 0x0)
ioctl$sock_SIOCGIFINDEX_802154(0xffffffffffffffff, 0x8933, &(0x7f0000000240)={'wpan4\x00', <r4=>0x0})
ioctl$sock_SIOCGIFINDEX_802154(0xffffffffffffffff, 0x8933, &(0x7f0000000280)={'wpan1\x00', <r5=>0x0})
r6 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10)
r7 = syz_genetlink_get_family_id$nl802154(&(0x7f0000000600), r6)
ioctl$sock_SIOCGIFINDEX_802154(r6, 0x8933, &(0x7f0000000080)={'wpan0\x00', <r8=>0x0})
sendmsg$NL802154_CMD_NEW_INTERFACE(r6, &(0x7f0000000700)={0x0, 0x0, &(0x7f00000006c0)={&(0x7f0000000380)=ANY=[@ANYBLOB='d\x00\x00\x00', @ANYRES16=r7, @ANYBLOB="010028bd7000fcdbdf25070000000c0017000201aaaaaaaaaaaa0a0004007770616e3300000008000100000000000c001700010055555555555508000300", @ANYRES32=r8, @ANYBLOB="0c0017000203aaaaaaaaaaaa080001a3370000000800050000"], 0x64}, 0x1, 0x0, 0x0, 0x2}, 0x300048c0)
r9 = syz_genetlink_get_family_id$nl802154(&(0x7f0000000180), 0xffffffffffffffff)
r10 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10)
ioctl$sock_SIOCGIFINDEX_802154(r10, 0x8933, &(0x7f0000000ec0)={'wpan0\x00', <r11=>0x0})
sendmsg$NL802154_CMD_DEL_SEC_KEY(r10, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000100)={&(0x7f0000000400)=ANY=[@ANYBLOB="1c00", @ANYRES16=r9, @ANYBLOB="010000000000000000001800000008000300", @ANYRES32=r11, @ANYBLOB="6d8480d3d4b2441057e22b4e2ce5fdafe6feda407aba8ec577d8040ca6f404af187aa6991867b3840cce6e42fed3cff2e464749b937ab8fed1b077611f818dc36d89f91f9a33372bc9e307972b6485381af141a558a528b0e6fb86edc5f7efce593a5b0ce3e0d07bf83c0feebab7cd54d13104c14942e0cfd1fbce8dfd95419de49d4ccc6fb9ddd418aef7897d43996069dcba9491f412"], 0x1c}, 0x1, 0x0, 0x0, 0x4000}, 0x0)
sendmsg$IEEE802154_LIST_IFACE(0xffffffffffffffff, &(0x7f0000000380)={&(0x7f0000000180)={0x10, 0x0, 0x0, 0x40000}, 0xc, &(0x7f0000000340)={&(0x7f00000002c0)=ANY=[@ANYBLOB='H\x00\x00\x00', @ANYRES16=0x0, @ANYBLOB="020025bd7000010000001f00000008000200", @ANYRES32=0x0, @ANYBLOB="a2cea72a", @ANYRES32=r4, @ANYBLOB="08000200", @ANYRES32=r5, @ANYBLOB="0a0001007770616e3000000008000200", @ANYRES32=r8, @ANYBLOB="08000200", @ANYRES32=r11, @ANYBLOB], 0x48}}, 0x810)
writev(r3, 0x0, 0x0)
r12 = socket$kcm(0x11, 0x3, 0x0)
setsockopt$sock_attach_bpf(r12, 0x107, 0xf, &(0x7f0000000000), 0x4)
sendmsg$kcm(r12, &(0x7f00000000c0)={&(0x7f0000000100)=@qipcrtr={0x2a, 0x4, 0x1}, 0x80, &(0x7f0000001340)=[{&(0x7f0000001380)="27031600160014000000002f1eafacf706e105000000884800050003ee0b80558ddbba9b37242d", 0x27}], 0x1}, 0x4)
setsockopt$inet6_MCAST_JOIN_GROUP(r2, 0x29, 0x6, &(0x7f0000000000)={0x14, {{0x29, 0x0, 0x5000000, @private1={0xfc, 0x1, '\x00', 0x1}, 0x1000000}}}, 0x88)
setsockopt$inet6_tcp_TLS_TX(r1, 0x11a, 0x1, &(0x7f0000000140)=@gcm_256={{0x304}, "6230742a644b1a19", "f89c705aa9dc0c4f699fcb1d6d9fa70060ded673dfe6c7e4dffe2828fcaae385", "0500", "8c8e869331718144"}, 0x38)
close(r1)
ioctl$SIOCSIFHWADDR(r1, 0x8b34, &(0x7f0000000000)={'veth0_virt_wifi\x00', @random="000500000020"})
ioctl$sock_SIOCETHTOOL(0xffffffffffffffff, 0x89ff, 0x0)

60.302524ms ago: executing program 0 (id=3168):
r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000100), 0x1c1902, 0x0)
ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f0000000040)={'syzkaller0\x00', 0x2}) (async)
unshare(0x26020480) (async)
r1 = bpf$MAP_CREATE(0x0, &(0x7f0000000100)=@base={0x3, 0x4, 0x4, 0x9, 0x0, 0x1}, 0x48)
bpf$MAP_CREATE(0x0, &(0x7f0000000100)=@base={0xd, 0x5, 0x4, 0x6, 0x0, r1}, 0x48) (async)
r2 = openat$tun(0xffffffffffffff9c, &(0x7f0000000500), 0x40, 0x0) (async)
r3 = socket$packet(0x11, 0x3, 0x300)
ioctl$sock_SIOCGIFINDEX(r3, 0x8933, &(0x7f0000001800)={'veth1_virt_wifi\x00', <r4=>0x0})
setsockopt$packet_int(r3, 0x107, 0xf, &(0x7f0000000000)=0x3da, 0x4) (async)
sendto$packet(r3, &(0x7f00000000c0)="3f03fe7f0302140006001e0089e9aaa911d7c2290f0086dd1327c9167c643c4a1b7880610cc96655b1b141ab059b24d0fbc50df71548a3f6c5609063382a0c1511fdf9435e3ffe46", 0xe90c, 0x0, &(0x7f0000000540)={0xc9, 0x0, r4, 0x1, 0x0, 0x6, @multicast}, 0x14)
ioctl$FIONCLEX(r3, 0x5450) (async)
close(r2) (async)
r5 = socket$nl_generic(0x10, 0x3, 0x10) (async)
r6 = socket$inet6_sctp(0xa, 0x1, 0x84) (async)
getsockopt$inet_sctp6_SCTP_ENABLE_STREAM_RESET(0xffffffffffffffff, 0x84, 0x76, &(0x7f0000000280)={<r7=>0x0}, &(0x7f00000002c0)=0x8)
getsockopt$inet_sctp6_SCTP_ASSOCINFO(r6, 0x84, 0x1, &(0x7f0000000380)={r7, 0xf, 0x3, 0x6, 0x5, 0xb2}, &(0x7f00000003c0)=0x14) (async)
ioctl$SIOCSIFHWADDR(r2, 0x8914, &(0x7f0000002280)={'syzkaller0\x00', @multicast}) (async)
r8 = socket$nl_route(0x10, 0x3, 0x0)
r9 = socket$nl_route(0x10, 0x3, 0x0) (async)
ioctl$XFS_IOC_START_COMMIT(r8, 0x80585882, 0xffffffffffffffff)
ioctl$sock_kcm_SIOCKCMATTACH(r2, 0x89e0, &(0x7f0000000240)={r5})
r10 = socket$unix(0x1, 0x1, 0x0) (async)
r11 = socket$nl_generic(0x10, 0x3, 0x10)
sendmsg$nl_generic(r11, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000240)={&(0x7f0000000bc0)={0x1c, 0x2c, 0x107, 0x0, 0x25dfdbfd, {0x8, 0x7c}, [@nested={0x8, 0x1, 0x0, 0x1, [@generic="1716c2e9"]}]}, 0x1c}, 0x1, 0x0, 0x0, 0xc010}, 0x0)
ioctl$sock_SIOCGIFINDEX(r10, 0x8933, &(0x7f0000000100)={'syzkaller0\x00', <r12=>0x0})
sendmsg$nl_route_sched(r9, &(0x7f00000008c0)={0x0, 0x0, &(0x7f0000000900)={&(0x7f0000000140)=@newqdisc={0x44, 0x24, 0x4ee4e6a52ff56541, 0x70bd26, 0xffffffff, {0x0, 0x0, 0x0, r12, {0x0, 0xfff1}, {0xffff, 0xffff}, {0xe}}, [@qdisc_kind_options=@q_hfsc={{0x9}, {0x14, 0x2, @TCA_HFSC_FSC={0x10, 0x2, {0x5, 0x7, 0xb3}}}}]}, 0x44}, 0x1, 0x0, 0x0, 0x4000000}, 0x0)
sendmsg$nl_route_sched(r9, &(0x7f0000000200)={0x0, 0x0, &(0x7f0000001000)={&(0x7f0000000300)=@newqdisc={0x48, 0x28, 0x4ee4e6a52ff56541, 0x4001, 0xffffbddc, {0x0, 0x0, 0x0, r12, {0x10}, {0x0, 0x6}, {0xe, 0xfff2}}, [@qdisc_kind_options=@q_cbs={{0x8}, {0x1c, 0x2, @TCA_CBS_PARMS={0x18, 0x1, {0xf8, '\x00', 0x6, 0x2, 0x3, 0x7fffffff}}}}]}, 0x48}, 0x1, 0x0, 0x0, 0x24000098}, 0x4000)
r13 = socket$netlink(0x10, 0x3, 0x0)
sendmsg$netlink(r13, &(0x7f0000000740)={0x0, 0x0, &(0x7f0000000000)=[{&(0x7f00000000c0)=ANY=[@ANYBLOB="2800000010000100000000001000000085ff00003b00000003fff0000000000008001c00c9"], 0x28}], 0x1, 0x0, 0x0, 0xb305e06d8ab48277}, 0x0) (async)
ioctl$sock_SIOCGIFINDEX(r8, 0x8933, &(0x7f0000000100)={'syzkaller0\x00'})

56.802547ms ago: executing program 1 (id=3169):
r0 = socket$nl_netfilter(0x10, 0x3, 0xc)
r1 = socket$nl_generic(0x10, 0x3, 0x10)
r2 = syz_genetlink_get_family_id$l2tp(&(0x7f0000000180), r0)
r3 = socket(0x18, 0x0, 0x1)
r4 = socket$inet_udp(0x2, 0x2, 0x0)
r5 = bpf$MAP_CREATE(0x0, &(0x7f0000000700)=ANY=[@ANYBLOB="0f000000040000000400000012"], 0x50)
r6 = bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000340)={0xe, 0x5, &(0x7f00000007c0)=@framed={{0x18, 0x2}, [@initr0={0x18, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0xa}]}, &(0x7f00000005c0)='syzkaller\x00'}, 0x94)
bpf$BPF_PROG_DETACH(0x8, &(0x7f0000000280)=ANY=[@ANYRES32=r5, @ANYRES32=r6, @ANYBLOB="05"], 0x10)
bpf$MAP_UPDATE_ELEM(0x2, &(0x7f0000000440)={r5, &(0x7f0000000440), &(0x7f0000000040)=@udp=r4}, 0x20)
bind$inet(r4, &(0x7f0000000040)={0x2, 0x4e20, @empty}, 0x21)
syz_emit_ethernet(0xbe, &(0x7f0000000000)={@dev={'\xaa\xaa\xaa\xaa\xaa', 0x23}, @dev={'\xaa\xaa\xaa\xaa\xaa', 0xc}, @void, {@ipv4={0x800, @udp={{0x5, 0x4, 0x0, 0x0, 0xb0, 0x0, 0x0, 0x0, 0x11, 0x0, @empty, @empty}, {0x0, 0x4e20, 0x9c, 0x0, @wg=@initiation={0x1, 0x0, "7b4b142b7461fd777b1c012bd14efb9f49fcdb8f080c26a04883ad5c8c82b8af", "584cbf2649a50f2dbc43efa8698d0a881c51852e4451b57d037ad3c04594282423424d00", "bcfd56f1375461caaa2f19935e6996c7096ffeeb0300000000000064", {"9a3bfbc1f39cb307b3472eb9cdb042d2", "643fcbb2c5a57df67d544af6e8dafe09"}}}}}}}, 0x0)
bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000140)={0x6, 0x3, &(0x7f0000000680)=ANY=[@ANYBLOB="1800000002000000000000000000000095"], 0x0, 0x2003, 0x0, 0x0, 0x41100}, 0x94)
r7 = bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000480)={0x6, 0x3, &(0x7f0000000680)=ANY=[], &(0x7f0000000200)='syzkaller\x00', 0x9}, 0x94)
bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000600)={r7, 0x5, 0xb68, 0x0, &(0x7f0000000000)='%', 0x0, 0xd01, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2}, 0x48)
recvmmsg(r4, &(0x7f0000000400)=[{{0x0, 0x0, &(0x7f0000000240)=[{&(0x7f0000000800)=""/4096, 0x1000}], 0x12}, 0xb}], 0x12, 0x40000021, 0x0)
getsockopt$nfc_llcp(r3, 0x111, 0x0, 0x0, 0x90aa62107f0000)
r8 = socket$nl_route(0x10, 0x3, 0x0)
r9 = syz_init_net_socket$802154_raw(0x24, 0x3, 0x0)
write(r9, &(0x7f00000002c0)="b9ba48", 0x3)
sendmsg$nl_route_sched(r8, &(0x7f00000009c0)={0x0, 0x0, &(0x7f0000000100)={&(0x7f0000000080)=@newtaction={0x4c, 0x1e, 0x109, 0x0, 0x25dfdbfe, {}, [{0x38, 0x1, [@m_mirred={0x34, 0x0, 0x0, 0x0, {{0xb, 0x9}, {0x4, 0xe}, {0x8, 0x6, "6ed00268"}, {0xc}, {0xc, 0x8, {0x1}}}}]}]}, 0x4c}, 0x1, 0x2b1e}, 0x58)
sendmsg$L2TP_CMD_SESSION_CREATE(r1, &(0x7f0000000340)={&(0x7f0000000100)={0x10, 0x0, 0x0, 0x1}, 0xc, &(0x7f00000002c0)={&(0x7f0000000240)={0x64, r2, 0x100, 0x70bd2d, 0x25dfdbfb, {}, [@L2TP_ATTR_VLAN_ID={0x6, 0xe, 0xfd0e}, @L2TP_ATTR_CONN_ID={0x8, 0x9, 0x3}, @L2TP_ATTR_IP_SADDR={0x8, 0x18, @dev={0xac, 0x14, 0x14, 0x18}}, @L2TP_ATTR_VLAN_ID={0x6, 0xe, 0x800}, @L2TP_ATTR_PEER_CONN_ID={0x8}, @L2TP_ATTR_SEND_SEQ={0x5, 0x13, 0xb1}, @L2TP_ATTR_IP_DADDR={0x8, 0x19, @multicast2}, @L2TP_ATTR_UDP_ZERO_CSUM6_TX={0x5}, @L2TP_ATTR_IP_SADDR={0x8, 0x18, @multicast1}, @L2TP_ATTR_IP_DADDR={0x8, 0x19, @empty}]}, 0x64}, 0x1, 0x0, 0x0, 0x8800}, 0x20000040)
r10 = syz_genetlink_get_family_id$tipc2(&(0x7f0000000240), 0xffffffffffffffff)
r11 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000001640)={0x3, 0xc, &(0x7f0000002380)=@framed={{0x18, 0x2, 0x0, 0x0, 0x8, 0x0, 0x0, 0x0, 0xd}, [@call={0x85, 0x0, 0x0, 0x2f}, @printk={@x, {}, {}, {}, {}, {0x7, 0x0, 0xb, 0x3, 0x0, 0x0, 0x1200}, {0x85, 0x0, 0x0, 0x71}}]}, &(0x7f0000000080)='GPL\x00', 0x0, 0x0, 0x0, 0x41100, 0x40, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x40}, 0x94)
bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f00000002c0)={r11, 0x2f, 0xe, 0x0, &(0x7f0000000100)="e0b9547ed387dbe9abc89b6f5bec", 0x0, 0xa5bc, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x50)
ioctl$XFS_IOC_ATTRMULTI_BY_HANDLE(r1, 0x4048587b, &(0x7f0000001c00)={{<r12=>r0, &(0x7f0000000580)='geneve1\x00', 0x280, &(0x7f00000005c0)={@_ha_fsid={[0x0, 0x800]}, {0x7, 0x7, 0x0, 0x3}}, 0x0, &(0x7f0000000600), &(0x7f0000000640)=0x9}, 0x7, &(0x7f0000001b00)=[{0x2, 0x10, &(0x7f0000000680)='(\'@:%\x00', &(0x7f00000006c0)="3c258cd171301c000fafd3cca585100c66e7fd4862e6199a7d03843688b7a9293da9a2374f609ca48259bcec7f40027318fb55cb745e65736afbba80", 0x3c, 0x18}, {0x1, 0x0, &(0x7f0000000700)='\x00', &(0x7f0000000740)="0055f575d5582f78b1491285e0c0de3383da7525855cf5a113eb21fb4f31f8e5fffa05bfe168f3595904ba25282210962b3f1e963e36ba43b301f5ed9eba80b665d0484e3085828926db90f28f9b3d98fc271377d1851f88f39a2f1bdcf86e75f177bbf1f417875b1980712331bec08d0c18d1b2958645d63abc22", 0x7b, 0xa}, {0x3, 0x0, &(0x7f00000007c0)='TIPCv2\x00', &(0x7f0000000800)="c3b6474d1bde815b464e0df1cdb71b35ec1f583d54feaf81239822cdb78eb2e8d2a6948809db7f59819dabdf2c4d89d995f612022423a5f2ec91caf167acae8ee34cfa38dd7ecbc06c0921d6211ec5a289aba68769d1fbc8878d17fc676f20541465c734865e12ae6aba71057f", 0x6d}, {0x2, 0x7, &(0x7f0000000880)='+\x00', &(0x7f00000008c0)="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", 0x1000, 0xa}, {0x2, 0x2, &(0x7f00000018c0)='\x00', &(0x7f0000001900)="6c44f7277339ccdf11c83724c59a9f40e78f9aced4924572df3e4d13da1fcefef84e692def35af6509f553dc43f17174c9f8f4dacfc8a89dd002a5da77", 0x3d, 0x12}, {0x0, 0x1, &(0x7f0000001940)='\x00', &(0x7f0000001980)="0381d0133d63e5deb2bc3c7ac231d0510021c673d5840fe40212469055e599cd6a8bfa5b2d6f1be185188a5d43229a21a17bccd83698c8a44e1d4ce4f13ecead5012c0c8fb50f1e6d9475004c5022683a31e761539a93dc86402f6971ffa7556c392dc49e0673089c8dacdbb358c6b90fd773c09a75ec67afe83c2cab266409ba0e7fa9b3c194fe2d743177e3091a0ca131c800d5245651035c98d50aaaf8f7fdcb6d9db11998e12e30549c53ecf404619c6aa693512d3d2053b", 0xba}, {0x3, 0x5, &(0x7f0000001a40)='\x00', &(0x7f0000001a80)="7bdfca82c20e0e73145ecd83c04a2c40d1759b3a75dd7acaf4c881b18c2af486f045c6004c4396426c4b79e4265ad41e9b7a4a764ab6ef1875ab0a2f04e033318b7ffc1bbb724725259e494a707995b6c0a1065d1d729db0ed3e7d8613e137e4a3ceec07055ad3bf4cebd9ba2c9f0636dd5087cc56287b582a1cd8ca", 0x7c, 0x2}]})
setsockopt$XDP_UMEM_REG(r12, 0x11b, 0x4, &(0x7f0000001d80)={&(0x7f0000001c80)=""/211, 0x8000, 0x0, 0x8, 0x1}, 0x20)
sendmsg$TIPC_NL_MON_SET(r1, &(0x7f0000000540)={&(0x7f00000000c0)={0x10, 0x0, 0x0, 0x200000}, 0xc, &(0x7f0000000500)={&(0x7f00000003c0)={0x13c, r10, 0x200, 0x70bd2a, 0x25dfdbfd, {}, [@TIPC_NLA_SOCK={0x44, 0x2, 0x0, 0x1, [@TIPC_NLA_SOCK_CON={0x3c, 0x3, 0x0, 0x1, [@TIPC_NLA_CON_NODE={0x8, 0x2, 0x8}, @TIPC_NLA_CON_FLAG={0x8, 0x1, 0x5}, @TIPC_NLA_CON_FLAG={0x8}, @TIPC_NLA_CON_FLAG={0x8}, @TIPC_NLA_CON_NODE={0x8, 0x2, 0x1}, @TIPC_NLA_CON_NODE={0x8, 0x2, 0xa1}, @TIPC_NLA_CON_NODE={0x8, 0x2, 0x200}]}, @TIPC_NLA_SOCK_HAS_PUBL={0x4}]}, @TIPC_NLA_MON={0x14, 0x9, 0x0, 0x1, [@TIPC_NLA_MON_REF={0x8, 0x2, 0x4}, @TIPC_NLA_MON_ACTIVATION_THRESHOLD={0x8, 0x1, 0x80}]}, @TIPC_NLA_BEARER={0x5c, 0x1, 0x0, 0x1, [@TIPC_NLA_BEARER_NAME={0xd, 0x1, @udp='udp:syz0\x00'}, @TIPC_NLA_BEARER_DOMAIN={0x8, 0x3, 0x6}, @TIPC_NLA_BEARER_DOMAIN={0x8, 0x3, 0x9}, @TIPC_NLA_BEARER_UDP_OPTS={0x38, 0x4, {{0x14, 0x1, @in={0x2, 0x4e20, @multicast2}}, {0x20, 0x2, @in6={0xa, 0x4e23, 0x537, @remote, 0x58bf}}}}]}, @TIPC_NLA_SOCK={0x68, 0x2, 0x0, 0x1, [@TIPC_NLA_SOCK_CON={0x2c, 0x3, 0x0, 0x1, [@TIPC_NLA_CON_FLAG={0x8, 0x1, 0x6}, @TIPC_NLA_CON_FLAG={0x8, 0x1, 0xad14}, @TIPC_NLA_CON_FLAG={0x8, 0x1, 0x5}, @TIPC_NLA_CON_NODE={0x8, 0x2, 0x501}, @TIPC_NLA_CON_NODE={0x8, 0x2, 0x7}]}, @TIPC_NLA_SOCK_REF={0x8, 0x2, 0x4}, @TIPC_NLA_SOCK_CON={0xc, 0x3, 0x0, 0x1, [@TIPC_NLA_CON_FLAG={0x8, 0x1, 0x8001}]}, @TIPC_NLA_SOCK_ADDR={0x8, 0x1, 0x7}, @TIPC_NLA_SOCK_REF={0x8, 0x2, 0xfffff0ef}, @TIPC_NLA_SOCK_HAS_PUBL={0x4}, @TIPC_NLA_SOCK_ADDR={0x8, 0x1, 0x1}, @TIPC_NLA_SOCK_ADDR={0x8, 0x1, 0xfffffffa}]}, @TIPC_NLA_NODE={0xc, 0x6, 0x0, 0x1, [@TIPC_NLA_NODE_ADDR={0x8, 0x1, 0x1}]}]}, 0x13c}, 0x1, 0x0, 0x0, 0x20040000}, 0x4)
r13 = bpf$MAP_CREATE_CONST_STR(0x0, &(0x7f0000000240)={0x2, 0x4, 0x8, 0x1, 0x80, 0x0, 0x0, '\x00', 0x0, 0x0}, 0x48)
bpf$PROG_LOAD(0x5, &(0x7f0000000840)={0x3, 0x1c, &(0x7f0000000000)=@ringbuf={{0x18, 0x8, 0x0, 0x0, 0x58}, {{0x18, 0x1, 0x1, 0x0, r13}, {}, {}, {0x85, 0x0, 0x0, 0x5}}, {{0x5, 0x0, 0x3, 0x9, 0x0, 0x1, 0x40000000}}, [@snprintf={{0x7, 0x0, 0xb, 0x2}, {0x3, 0x3, 0x3, 0xa, 0x9}, {0x5, 0x0, 0xb, 0x9, 0x0, 0x0, 0x1}, {0x3, 0x3, 0x3, 0xa, 0xa}, {0x7, 0x1, 0xb, 0x7, 0x2}, {0x7, 0x0, 0x0, 0x8, 0x0, 0x0, 0xfffffdff}, {}, {}, {0x4, 0x0, 0x7}, {0x18, 0x2, 0x2, 0x0, r13}, {}, {0x46, 0x8, 0xfff0, 0x76}}], {{0x6, 0x1, 0x7, 0x5}, {0x6, 0x0, 0x5, 0x8}, {0x85, 0x0, 0x0, 0x81}}}, &(0x7f0000000300)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x9, '\x00', 0x0, @sched_cls=0x2e, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94)
socket$nl_route(0x10, 0x3, 0x0)

52.100375ms ago: executing program 2 (id=3170):
r0 = socket$nl_route(0x10, 0x3, 0x0)
r1 = socket$nl_route(0x10, 0x3, 0x0)
sendmsg$nl_route(r1, &(0x7f0000004380)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000600)=ANY=[@ANYBLOB="2c0000001800090400000001fedbdf250a0000000000000000000b8008001e0001000000080008"], 0x2c}}, 0x0)
socket$rds(0x15, 0x5, 0x0)
unshare(0x22020600)
pselect6(0x40, &(0x7f00000003c0)={0x9, 0x1, 0x3, 0x7fff, 0xb, 0x4, 0x3}, 0x0, 0x0, 0x0, 0x0)
r2 = socket(0x10, 0x80002, 0x0)
r3 = socket$netlink(0x10, 0x3, 0x0)
socket$netlink(0x10, 0x3, 0x5)
getsockname$packet(0xffffffffffffffff, 0x0, 0x0)
sendmsg$nl_route(r3, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000300)={&(0x7f0000000240)=@newlink={0x48, 0x10, 0xffffff1f, 0x0, 0x80, {0x0, 0x0, 0x0, 0x0, 0x0, 0x3f00}, [@IFLA_LINKINFO={0x28, 0x12, 0x0, 0x1, @veth={{0x9}, {0x18, 0x2, 0x0, 0x1, @val=@VETH_INFO_PEER={0x14, 0x1, {{0x0, 0x0, 0x0, 0x0, 0x10440}}}}}}]}, 0x48}}, 0x0)
r4 = socket$inet_udp(0x2, 0x2, 0x0)
r5 = socket$nl_route(0x10, 0x3, 0x0)
ioctl$sock_SIOCGIFINDEX(r5, 0x8933, &(0x7f00000004c0)={'bond0\x00', <r6=>0x0})
sendmsg$nl_route(r5, &(0x7f0000000200)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000280)=ANY=[@ANYBLOB="4400000010001d0025bd7000fadbdf2500000000", @ANYRES32=r6, @ANYBLOB="138000002b9201002400128009000100626f6e6400000000140002800800", @ANYRES16=r4], 0x44}}, 0x8000)
sendmmsg$alg(r2, &(0x7f00000000c0), 0x492492492492627, 0x0)
r7 = socket$nl_route(0x10, 0x3, 0x0)
ioctl$ifreq_SIOCGIFINDEX_team(r7, 0x8933, &(0x7f0000000000)={'team0\x00', <r8=>0x0})
r9 = bpf$MAP_CREATE_CONST_STR(0x0, &(0x7f0000000480)={0x2, 0x4, 0x8, 0x1, 0x80, 0x0, 0x4000000}, 0x50)
r10 = bpf$MAP_CREATE_RINGBUF(0x0, &(0x7f0000000340)={0x1b, 0x0, 0x0, 0x40000, 0x0, r9, 0xfff}, 0x50)
bpf$PROG_LOAD(0x5, &(0x7f0000000b40)={0x15, 0x1c, &(0x7f0000000100)=@ringbuf={{0x18, 0x8, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x80000000}, {{0x18, 0x1, 0x1, 0x0, r10}, {}, {0x7, 0x0, 0xb, 0x6}, {0x85, 0x0, 0x0, 0x5}}, {{0x5, 0x0, 0x3}}, [@snprintf={{0x7, 0x0, 0xb, 0x2}, {0x3, 0x3, 0x3, 0xa, 0x9}, {0x5, 0x0, 0xb, 0x9, 0x0, 0x0, 0x2}, {0x3, 0x3, 0x3, 0xa, 0xa}, {0x6, 0x1, 0xa, 0x9, 0x8}, {0x7, 0x0, 0x0, 0x8}, {0x7, 0x1, 0xb, 0x4, 0x8}, {}, {0x7, 0x0, 0xc}, {0x18, 0x6, 0x2, 0x0, r9}, {}, {0x46, 0x8, 0xfff0, 0x76}}], {{0x7, 0x1, 0xb, 0x8, 0x9, 0x20}, {0x6, 0x0, 0x5, 0x8}, {0x85, 0x0, 0x0, 0x7}}}, &(0x7f0000000980)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0xd, '\x00', 0x0, @sk_reuseport=0x27, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94)
sendmsg$nl_route(r7, &(0x7f0000000100)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000001280)=@newlink={0x58, 0x10, 0xffffffffffffffff, 0x70bd25, 0x25dfdbfb, {0x0, 0x0, 0x0, 0x0, 0x2017, 0x2021}, [@IFLA_LINKINFO={0x30, 0x12, 0x0, 0x1, @macvlan={{0xc}, {0x20, 0x2, 0x0, 0x1, [@IFLA_MACVLAN_MACADDR_MODE={0x8}, @IFLA_MACVLAN_MODE={0x8, 0x1, 0x10}, @IFLA_MACVLAN_MACADDR={0xa, 0x4, @dev={'\xaa\xaa\xaa\xaa\xaa', 0x42}}]}}}, @IFLA_LINK={0x8, 0x5, r8}]}, 0x58}, 0x1, 0x0, 0x0, 0x1}, 0x8000002)
r11 = socket$netlink(0x10, 0x3, 0x0)
recvmmsg(r11, 0x0, 0x0, 0x2040, 0x0)
sendmsg$nl_route(r0, &(0x7f0000000000)={0x0, 0x0, 0x0}, 0x0)
r12 = socket$packet(0x11, 0x2, 0x300)
r13 = socket$l2tp(0x2, 0x2, 0x73)
connect$qrtr(r13, &(0x7f0000004d80)={0x2a, 0xffffffffffffffff, 0x3ffe}, 0xc)
sendmmsg(r12, 0x0, 0x0, 0x6080)

51.023926ms ago: executing program 3 (id=3171):
r0 = socket$nl_xfrm(0x10, 0x3, 0x6)
sendmsg$nl_xfrm(r0, &(0x7f0000000180)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f00000004c0)=@updpolicy={0xb8, 0x19, 0x1, 0x0, 0x0, {{@in=@multicast1=0xe0000002, @in, 0x0, 0x0, 0x0, 0x0, 0xa, 0x0, 0x0, 0x87}, {0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffffffffffb}, {0x0, 0x0, 0x200000000000000, 0x1}}}, 0xb8}}, 0x2c000010)
socket$nl_xfrm(0x10, 0x3, 0x6)
sendmsg$nl_xfrm(r0, &(0x7f0000000180)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f0000000000)=@updpolicy={0xb8, 0x15, 0x1, 0x0, 0x0, {{@in=@multicast1=0xe0000002, @in=@empty, 0x300, 0x0, 0x0, 0x0, 0xa, 0x10, 0x80, 0x3c}, {0x0, 0x5, 0x0, 0x21, 0x0, 0x0, 0xffffffff}, {}, 0x0, 0x6e6bb5, 0x0, 0x0, 0x3, 0x2}}, 0xb8}}, 0x0)

0s ago: executing program 3 (id=3172):
r0 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x0, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32, @ANYBLOB="0000000000000000b70800000d0000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000000100000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x32, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5, 0x0, 0x0, 0x0}, 0x94)
r1 = bpf$MAP_CREATE(0x0, &(0x7f0000000740)=ANY=[@ANYBLOB="0b00000005000000000400000900000001"], 0x48)
bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0xa, 0x4, &(0x7f0000000480)=ANY=[@ANYBLOB="18000000000000000000000000000000850000006d"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94)
r2 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000280)='memory.events\x00', 0x275a, 0x0)
ioctl$FS_IOC_RESVSP(r2, 0x40305828, &(0x7f0000000180)={0x0, 0x2, 0x8, 0x7100000})
r3 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000d80)={0x18, 0x5, &(0x7f0000000480)=ANY=[@ANYBLOB="1801000021"], 0x0, 0x40, 0x0, 0x0, 0x41100, 0xb4a02fe0ce239f93, '\x00', 0x0, 0x2, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @value=r2}, 0x94)
r4 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0xe, 0x0, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000800000000000000000000018110000", @ANYRES32=r1], 0x0, 0x0, 0x0, 0x0, 0x41100, 0x59, '\x00', 0x0, @fallback=0x36, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff, r3, 0x0, 0x0, 0x0, 0x0}, 0x94)
r5 = openat$tun(0xffffffffffffff9c, &(0x7f0000000000), 0x40241, 0x0)
ioctl$TUNSETIFF(r5, 0x400454ca, &(0x7f0000000200)={'syzkaller1\x00', 0xc201})
r6 = socket$inet6(0xa, 0x2, 0x0)
bind$inet6(r6, &(0x7f0000f5dfe4)={0xa, 0x4e20, 0x0, @empty}, 0x1c)
recvmmsg(r6, &(0x7f00000000c0)=[{{0x0, 0x0, 0x0, 0x0, &(0x7f0000002040)=""/203, 0xcb}, 0x6}], 0x1, 0x0, 0x0)
bpf$BPF_PROG_QUERY(0x10, &(0x7f0000000380)={@cgroup=r2, 0x13, 0x1, 0x1000, &(0x7f0000000080)=[0x0, 0x0, 0x0, 0x0], 0x4, 0x0, &(0x7f00000002c0)=[0x0, 0x0, 0x0], &(0x7f0000000300)=[0x0], &(0x7f0000000340)=[0x0, 0x0], <r7=>0x0}, 0x40)
bpf$BPF_LINK_CREATE(0x1c, &(0x7f00000003c0)={r0, r2, 0x1b, 0x0, @val=@tcx={@void, @value=r4, @void, @void, r7}}, 0x1c)
setsockopt$inet6_int(r6, 0x29, 0x31, &(0x7f00000001c0)=0x80000008, 0x4)
mmap(&(0x7f0000001000/0xc00000)=nil, 0xc00000, 0x3000004, 0x3032, 0xffffffffffffffff, 0x0)
r8 = socket$kcm(0x2, 0xa, 0x2)
ioctl$SIOCSIFHWADDR(r8, 0x8914, &(0x7f0000000180)={'syzkaller1\x00', @link_local})
r9 = openat$tun(0xffffffffffffff9c, &(0x7f0000000100), 0x8080, 0x0)
ioctl$TUNSETIFF(r9, 0x400454ca, &(0x7f0000000040)={'syzkaller0\x00', 0x2})
r10 = socket$nl_generic(0x10, 0x3, 0x10)
r11 = syz_genetlink_get_family_id$tipc(&(0x7f00000000c0), r10)
sendmsg$TIPC_CMD_ENABLE_BEARER(r10, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000280)={&(0x7f0000000680)=ANY=[@ANYBLOB='8\x00\x00\x00', @ANYRES16=r11, @ANYBLOB="010000000d0000000000010000000000000001410000001c001700000000000000006574683a73797a6b616c6c657230"], 0x38}}, 0x0)
r12 = socket$unix(0x1, 0x1, 0x0)
r13 = socket$nl_route(0x10, 0x3, 0x0)
ioctl$sock_SIOCGIFINDEX(r12, 0x8933, &(0x7f0000000100)={'syzkaller0\x00', <r14=>0x0})
sendmsg$nl_route_sched(r13, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000180)={&(0x7f00000026c0)=@newqdisc={0x48, 0x24, 0x4ee4e6a52ff56541, 0x0, 0x0, {0x0, 0x0, 0x0, r14, {0x0, 0xb}, {0xffff, 0xffff}, {0xfff2, 0x2}}, [@qdisc_kind_options=@q_cbs={{0x8}, {0x1c, 0x2, @TCA_CBS_PARMS={0x18, 0x1, {0x0, '\x00', 0x1, 0x7, 0x100, 0x8}}}}]}, 0x48}, 0x1, 0x0, 0x0, 0x20000001}, 0x0)
r15 = openat$tun(0xffffffffffffff9c, &(0x7f00000001c0), 0x208802, 0x0)
close(r15)
socket(0x400000000010, 0x3, 0x0)

kernel console output (not intermixed with test programs):

2550] 8021q: adding VLAN 0 to HW filter on device netdevsim3
[  246.324479][T12550] A link change request failed with some changes committed already. Interface wlan0 may have been left with an inconsistent configuration, please check.
[  246.365431][ T6808] bridge0: port 1(bridge_slave_0) entered blocking state
[  246.372597][ T6808] bridge0: port 1(bridge_slave_0) entered forwarding state
[  246.384917][ T6808] bridge0: port 2(bridge_slave_1) entered blocking state
[  246.392096][ T6808] bridge0: port 2(bridge_slave_1) entered forwarding state
[  246.782529][T12549] nci: __nci_request: wait_for_completion_interruptible_timeout failed -512
[  247.176963][T12598] netlink: 'syz.1.1727': attribute type 35 has an invalid length.
[  247.305130][T12598] ip6tnl2: entered allmulticast mode
[  247.317632][ T6813] ip6_tunnel: ip6tnl2 xmit: Local address not yet configured!
[  247.445277][T12610] openvswitch: netlink: Flow actions may not be safe on all matching packets.
[  247.816641][T12622] lo speed is unknown, defaulting to 1000
[  248.355053][T12652] vlan3: entered promiscuous mode
[  248.377626][T12652] geneve1: entered promiscuous mode
[  248.388165][T12652] vlan3: entered allmulticast mode
[  248.394234][T12652] geneve1: entered allmulticast mode
[  248.698074][T12678] syzkaller0: entered promiscuous mode
[  248.725656][T12678] syzkaller0: entered allmulticast mode
[  248.742320][T12672] sch_tbf: burst 255 is lower than device syzkaller0 mtu (1514) !
[  248.798336][T12684] netlink: 'syz.0.1750': attribute type 13 has an invalid length.
[  248.935925][T12690] netlink: 'syz.2.1752': attribute type 31 has an invalid length.
[  249.010131][ T6808] bond5: (slave bridge4): link status up again after 0 ms
[  249.022498][ T6808] bond5: (slave bridge4): failed to get link speed/duplex
[  249.073952][T12697] __nla_validate_parse: 19 callbacks suppressed
[  249.073972][T12697] netlink: 40 bytes leftover after parsing attributes in process `syz.2.1752'.
[  249.148774][T12699] syzkaller1: entered promiscuous mode
[  249.160134][T12699] syzkaller1: entered allmulticast mode
[  249.199030][T12699] netlink: 8 bytes leftover after parsing attributes in process `syz.1.1755'.
[  249.209016][ T6810] bond5: (slave bridge4): failed to get link speed/duplex
[  249.519202][ T6813] bond5: (slave bridge4): failed to get link speed/duplex
[  249.547051][T12715] netlink: 'syz.0.1759': attribute type 1 has an invalid length.
[  249.612834][T12720] netlink: 28 bytes leftover after parsing attributes in process `syz.0.1759'.
[  249.712552][T12715] bond0: entered promiscuous mode
[  249.756010][T12715] 8021q: adding VLAN 0 to HW filter on device bond0
[  249.805774][T12720] bond0: entered allmulticast mode
[  249.839626][T12735] IPVS: set_ctl: invalid protocol: 0 10.1.1.0:20001
[  249.959512][T12722] bond0: (slave bridge6): making interface the new active one
[  249.976926][T12722] bridge6: entered promiscuous mode
[  249.990533][T12722] bridge6: entered allmulticast mode
[  250.014084][T12722] bond0: (slave bridge6): Enslaving as an active interface with an up link
[  250.056553][T12735] bridge0: adding interface bridge0 with same address as a received packet (addr:aa:aa:aa:aa:aa:1b, vlan:0)
[  250.189406][ T6810] bond5: (slave bridge4): failed to get link speed/duplex
[  250.255323][T12755] netlink: 8 bytes leftover after parsing attributes in process `syz.4.1767'.
[  250.339292][ T6803] bond5: (slave bridge4): failed to get link speed/duplex
[  250.479125][   T13] bond5: (slave bridge4): failed to get link speed/duplex
[  251.227292][T12805] netlink: 48 bytes leftover after parsing attributes in process `syz.1.1778'.
[  251.501596][T12812] netlink: 16 bytes leftover after parsing attributes in process `syz.1.1778'.
[  251.548900][    C0] ip6_tunnel: ip6tnl2 xmit: Local address not yet configured!
[  251.556801][T12809] netlink: 8 bytes leftover after parsing attributes in process `syz.1.1778'.
[  251.569250][T12809] netlink: 28 bytes leftover after parsing attributes in process `syz.1.1778'.
[  251.856867][T12791] pimreg: entered allmulticast mode
[  251.878704][ T6805] bond5: (slave bridge4): failed to get link speed/duplex
[  252.023712][T12817] netlink: 4 bytes leftover after parsing attributes in process `syz.2.1780'.
[  252.028725][ T6810] bond5: (slave bridge4): failed to get link speed/duplex
[  252.140331][T12823] netlink: 8 bytes leftover after parsing attributes in process `syz.0.1782'.
[  252.218153][T12829] IPVS: set_ctl: invalid protocol: 29 127.0.0.1:20000
[  252.355867][T12832] veth3: entered promiscuous mode
[  252.377684][T12841] batman_adv: batadv0: Interface deactivated: batadv_slave_0
[  252.521032][T12841] batman_adv: batadv0: Removing interface: batadv_slave_0
[  252.589059][ T6803] bond5: (slave bridge4): failed to get link speed/duplex
[  252.708745][ T6805] bond5: (slave bridge4): failed to get link speed/duplex
[  252.828848][ T6813] bond5: (slave bridge4): failed to get link speed/duplex
[  253.001578][ T6813] bond5: (slave bridge4): failed to get link speed/duplex
[  253.199641][T12881] 8021q: adding VLAN 0 to HW filter on device bond6
[  253.258814][ T6803] bond5: (slave bridge4): failed to get link speed/duplex
[  253.386031][T12898] xt_l2tp: v2 tid > 0xffff: 37482740
[  254.110996][T12945] Cannot find add_set index 1 as target
[  254.122323][T12934] __nla_validate_parse: 5 callbacks suppressed
[  254.122338][T12934] netlink: 8 bytes leftover after parsing attributes in process `syz.4.1810'.
[  254.282256][T12951] lo speed is unknown, defaulting to 1000
[  254.690919][T12961] netlink: 68 bytes leftover after parsing attributes in process `syz.2.1814'.
[  255.239402][ T6805] net_ratelimit: 16 callbacks suppressed
[  255.239419][ T6805] bond5: (slave bridge4): failed to get link speed/duplex
[  255.318539][T12990] netlink: 5504 bytes leftover after parsing attributes in process `syz.0.1822'.
[  255.321391][T12986] netlink: 44 bytes leftover after parsing attributes in process `syz.1.1821'.
[  255.329254][T12990] openvswitch: netlink: Flow key attr not present in new flow.
[  255.390411][ T6810] bond5: (slave bridge4): failed to get link speed/duplex
[  255.499799][ T6813] bond5: (slave bridge4): failed to get link speed/duplex
[  255.618948][ T6803] bond5: (slave bridge4): failed to get link speed/duplex
[  255.696429][T13007] netlink: 'syz.4.1828': attribute type 1 has an invalid length.
[  255.791735][T13007] 8021q: adding VLAN 0 to HW filter on device bond8
[  255.805633][T13008] bond8: entered allmulticast mode
[  255.833905][T13026] netlink: 8 bytes leftover after parsing attributes in process `syz.0.1831'.
[  255.852356][  T114] bond5: (slave bridge4): failed to get link speed/duplex
[  255.903367][T13028] netlink: 104 bytes leftover after parsing attributes in process `syz.1.1833'.
[  256.018710][ T6810] bond5: (slave bridge4): failed to get link speed/duplex
[  256.042211][T13035] x_tables: ip6_tables: eui64 match: used from hooks OUTPUT, but only valid from PREROUTING/INPUT/FORWARD
[  256.042717][T13037] netlink: 'syz.1.1837': attribute type 11 has an invalid length.
[  256.072183][T13037] netlink: 36 bytes leftover after parsing attributes in process `syz.1.1837'.
[  256.149527][ T6803] bond5: (slave bridge4): failed to get link speed/duplex
[  256.201662][T13046] syzkaller1: entered promiscuous mode
[  256.236332][T13046] syzkaller1: entered allmulticast mode
[  256.350660][ T6810] bond5: (slave bridge4): failed to get link speed/duplex
[  256.478416][T13059] lo speed is unknown, defaulting to 1000
[  256.484337][  T114] bond5: (slave bridge4): failed to get link speed/duplex
[  256.552253][T13075] ip6erspan2: entered allmulticast mode
[  256.586348][T13077] netlink: 48 bytes leftover after parsing attributes in process `syz.1.1844'.
[  256.927346][T13084] netlink: 64 bytes leftover after parsing attributes in process `syz.4.1848'.
[  256.962945][T13086] netlink: 4 bytes leftover after parsing attributes in process `syz.4.1848'.
[  258.137201][T13127] netlink: 'syz.2.1859': attribute type 1 has an invalid length.
[  258.626074][T13144] xt_hashlimit: max too large, truncated to 1048576
[  258.694317][T13144] No such timeout policy "syz1"
[  258.765401][T13148] lo: Caught tx_queue_len zero misconfig
[  258.780219][T13149] syzkaller0: entered promiscuous mode
[  258.785826][T13149] syzkaller0: entered allmulticast mode
[  258.987996][T13164] xt_hashlimit: size too large, truncated to 1048576
[  259.529159][T13190] tipc: Failed to remove unknown binding: 66,1,1/818530401:898303492/898303494
[  259.559032][T13190] tipc: Failed to remove unknown binding: 66,1,1/818530401:898303492/898303494
[  259.572992][T13190] tipc: Failed to remove unknown binding: 66,1,1/818530401:898303492/898303494
[  259.584523][T13190] __nla_validate_parse: 143 callbacks suppressed
[  259.584539][T13190] netlink: 8 bytes leftover after parsing attributes in process `syz.4.1874'.
[  259.612283][T13189] netdevsim netdevsim1 netdevsim3: unset [0, 0] type 1 family 0 port 8472 - 0
[  259.622211][T13189] netdevsim netdevsim1 netdevsim3: unset [1, 0] type 2 family 0 port 6081 - 0
[  260.030356][    C0] ip6_tunnel: ip6tnl2 xmit: Local address not yet configured!
[  260.087130][T13166] infiniband uyz0: set active
[  260.111675][T13166] infiniband uyz0: added bridge_slave_1
[  260.151078][T13166] smbdirect: ib_dev[uyz0]: added: IB_CA max_fast_reg_page_list_len=512 device_cap_flags=0x1c001223c76 kernel_cap_flags=0x14 page_size_cap=0xfffff000
[  260.154016][T13222] netlink: 8 bytes leftover after parsing attributes in process `syz.1.1882'.
[  260.166340][T13166] smbdirect: ib_dev[uyz0]: num_ports=1 max_qp_rd_atom=128 max_qp_init_rd_atom=128 max_sgl_rd=0 max_sge_rd=32 max_cqe=32767 max_qp_wr=1048576 max_send_sge=32 max_recv_sge=32
[  260.193130][T13166] smbdirect: ib_dev[uyz0]PORT[1]: iwarp=0 ib=0 roce=1 v1=0 v2=1 core_cap_flags=0x803005
[  260.227942][T13227] netlink: 'syz.1.1882': attribute type 14 has an invalid length.
[  260.245101][T13166] RDS/IB: uyz0: added
[  260.255334][T13166] smc: adding ib device uyz0 with port count 1
[  260.258809][T13227] netlink: 32 bytes leftover after parsing attributes in process `syz.1.1882'.
[  260.262607][T13166] smc:    ib device uyz0 port 1 has no pnetid
[  260.307375][T13224] netlink: 20 bytes leftover after parsing attributes in process `syz.2.1883'.
[  260.458733][ T6813] net_ratelimit: 26 callbacks suppressed
[  260.458751][ T6813] bond5: (slave bridge4): failed to get link speed/duplex
[  260.598937][ T6803] bond5: (slave bridge4): failed to get link speed/duplex
[  260.732112][ T6803] bond5: (slave bridge4): failed to get link speed/duplex
[  260.869023][ T6813] bond5: (slave bridge4): failed to get link speed/duplex
[  261.026978][ T5293] 8021q: adding VLAN 0 to HW filter on device netdevsim3
[  261.140154][T13256] bond8 (unregistering): Released all slaves
[  261.197328][T13258] ip6gre1: entered promiscuous mode
[  261.204347][T13258] ip6gre1: entered allmulticast mode
[  261.214587][   T13] ip6_tunnel: ip6gre1 xmit: Local address not yet configured!
[  261.261204][   T13] ip6_tunnel: ip6gre1 xmit: Local address not yet configured!
[  261.269118][   T10] ip6_tunnel: ip6gre1 xmit: Local address not yet configured!
[  261.298701][ T6810] bond5: (slave bridge4): failed to get link speed/duplex
[  261.349344][   T10] ip6_tunnel: ip6gre1 xmit: Local address not yet configured!
[  261.448840][  T114] bond5: (slave bridge4): failed to get link speed/duplex
[  261.579388][ T6810] bond5: (slave bridge4): failed to get link speed/duplex
[  261.698536][T13290] netlink: 8 bytes leftover after parsing attributes in process `syz.4.1898'.
[  261.719033][ T6803] bond5: (slave bridge4): failed to get link speed/duplex
[  261.729940][T13290] netlink: 8 bytes leftover after parsing attributes in process `syz.4.1898'.
[  261.839498][   T10] ip6_tunnel: ip6gre1 xmit: Local address not yet configured!
[  262.135009][T13316] netlink: 8 bytes leftover after parsing attributes in process `syz.0.1905'.
[  262.147332][T13291] hsr0: A HSR master's MTU cannot be greater than the smallest MTU of its slaves minus the HSR Tag length (6 octets).
[  262.170770][    C1] bridge0: received packet on bridge_slave_0 with own address as source address (addr:aa:aa:aa:aa:aa:1b, vlan:0)
[  262.219563][ T6813] bond5: (slave bridge4): failed to get link speed/duplex
[  262.462803][T13327] bond0: option active_slave: mode dependency failed, not supported in mode balance-rr(0)
[  262.564691][T13334] netlink: 124 bytes leftover after parsing attributes in process `syz.0.1911'.
[  262.709441][T13345] syzkaller0: refused to change device tx_queue_len
[  263.064222][T13356] netlink: 8 bytes leftover after parsing attributes in process `syz.0.1917'.
[  263.090448][T13356] veth1: Caught tx_queue_len zero misconfig
[  263.358941][T13376] netlink: 76 bytes leftover after parsing attributes in process `syz.1.1921'.
[  263.641444][T13387] netlink: 'syz.1.1923': attribute type 6 has an invalid length.
[  263.673721][T13387] IPv6: NLM_F_CREATE should be specified when creating new route
[  263.984403][T13398] netlink: 'syz.1.1926': attribute type 1 has an invalid length.
[  263.999907][T13396] bridge0: port 1(macsec1) entered blocking state
[  264.018404][T13396] bridge0: port 1(macsec1) entered disabled state
[  264.036927][T13396] macsec1: entered allmulticast mode
[  264.044991][T13396] bridge0: entered allmulticast mode
[  264.063854][T13396] macsec1: left allmulticast mode
[  264.069182][T13396] bridge0: left allmulticast mode
[  264.250921][T13416] netlink: 'syz.4.1932': attribute type 13 has an invalid length.
[  264.308394][T13416] veth1_vlan: left allmulticast mode
[  264.359606][ T6813] netdevsim netdevsim4 netdevsim0: unset [1, 0] type 2 family 0 port 6081 - 0
[  264.373807][ T6813] netdevsim netdevsim4 netdevsim1: unset [1, 0] type 2 family 0 port 6081 - 0
[  264.390357][   T13] netdevsim netdevsim4 netdevsim2: unset [1, 0] type 2 family 0 port 6081 - 0
[  264.404944][   T13] netdevsim netdevsim4 netdevsim3: unset [1, 0] type 2 family 0 port 6081 - 0
[  265.161862][T13449] __nla_validate_parse: 3 callbacks suppressed
[  265.161881][T13449] netlink: 4 bytes leftover after parsing attributes in process `syz.2.1941'.
[  265.228833][    C0] ip6_tunnel: ip6gre1 xmit: Local address not yet configured!
[  265.260865][T13451] bond9: entered promiscuous mode
[  265.266227][T13451] 8021q: adding VLAN 0 to HW filter on device bond9
[  265.346707][T13453] bridge5: entered promiscuous mode
[  265.355617][T13453] bond9: (slave bridge5): Enslaving as an active interface with an up link
[  265.549305][   T13] net_ratelimit: 28 callbacks suppressed
[  265.549325][   T13] bond5: (slave bridge4): failed to get link speed/duplex
[  265.668829][   T13] bond5: (slave bridge4): failed to get link speed/duplex
[  265.778705][   T13] bond5: (slave bridge4): failed to get link speed/duplex
[  265.888739][ T6805] bond5: (slave bridge4): failed to get link speed/duplex
[  266.029173][   T13] bond5: (slave bridge4): failed to get link speed/duplex
[  266.158881][   T13] bond5: (slave bridge4): failed to get link speed/duplex
[  266.197197][T13472] x_tables: duplicate underflow at hook 4
[  266.269363][T13476] netlink: 4 bytes leftover after parsing attributes in process `syz.4.1949'.
[  266.438738][ T6810] bond5: (slave bridge4): failed to get link speed/duplex
[  266.548759][ T6810] bond5: (slave bridge4): failed to get link speed/duplex
[  266.668891][ T6810] bond5: (slave bridge4): failed to get link speed/duplex
[  266.779041][ T6810] bond5: (slave bridge4): failed to get link speed/duplex
[  267.305375][T13420] nci: __nci_request: wait_for_completion_interruptible_timeout failed -512
[  267.945899][T13538] netlink: 312 bytes leftover after parsing attributes in process `syz.0.1964'.
[  267.964476][T13538] netlink: 'syz.0.1964': attribute type 1 has an invalid length.
[  267.974544][T13541] netlink: 148 bytes leftover after parsing attributes in process `syz.3.1965'.
[  268.021518][T13540] xt_hashlimit: size too large, truncated to 1048576
[  269.201096][T13564] netlink: 44 bytes leftover after parsing attributes in process `syz.1.1974'.
[  269.307335][T13575] netlink: 34 bytes leftover after parsing attributes in process `syz.4.1978'.
[  269.433066][T13578] netlink: 'syz.3.1979': attribute type 11 has an invalid length.
[  269.782240][T13578] mac80211_hwsim hwsim27 wlan0: entered promiscuous mode
[  269.820167][T13598] workqueue: Failed to create a rescuer kthread for wq "nfc5_nci_rx_wq": -EINTR
[  269.822516][T13578] mac80211_hwsim hwsim27 wlan0: entered allmulticast mode
[  270.244142][T13623] netlink: 8 bytes leftover after parsing attributes in process `syz.1.1986'.
[  270.312791][T13619] bond10: option arp_validate: mode dependency failed, not supported in mode 802.3ad(4)
[  270.325406][T13619] bond10 (unregistering): Released all slaves
[  270.469752][T13629] netlink: 32 bytes leftover after parsing attributes in process `syz.1.1986'.
[  270.587410][T13639] netlink: 12 bytes leftover after parsing attributes in process `syz.4.1988'.
[  270.621219][ T6805] net_ratelimit: 30 callbacks suppressed
[  270.621239][ T6805] bond5: (slave bridge4): failed to get link speed/duplex
[  270.661832][ T6805] bond8: (slave �): failed to get link speed/duplex
[  270.760260][ T6803] bond5: (slave bridge4): failed to get link speed/duplex
[  270.817579][T13644] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium
[  270.827519][ T6805] bond8: (slave �): failed to get link speed/duplex
[  270.847115][T13649] openvswitch: netlink: Flow actions may not be safe on all matching packets.
[  270.873712][T13651] netlink: 36 bytes leftover after parsing attributes in process `syz.0.1993'.
[  270.889722][ T6805] bond5: (slave bridge4): failed to get link speed/duplex
[  270.928825][ T6805] bond8: (slave �): failed to get link speed/duplex
[  270.976075][T13662] lo: entered allmulticast mode
[  271.001775][T13662] A link change request failed with some changes committed already. Interface lo may have been left with an inconsistent configuration, please check.
[  271.015890][T13668] netlink: 40 bytes leftover after parsing attributes in process `syz.3.1997'.
[  271.039001][ T6805] bond5: (slave bridge4): failed to get link speed/duplex
[  271.053578][T13668] pim6reg1: entered promiscuous mode
[  271.063710][T13668] pim6reg1: entered allmulticast mode
[  271.139248][ T6810] bond8: (slave �): failed to get link speed/duplex
[  271.150782][T13672] tipc: Enabled bearer <eth:syzkaller0>, priority 0
[  271.170055][T13672] syzkaller0: entered promiscuous mode
[  271.177116][T13672] syzkaller0: entered allmulticast mode
[  271.194384][T13672] sch_tbf: burst 255 is lower than device syzkaller0 mtu (1514) !
[  271.243932][T13672] tipc: Resetting bearer <eth:syzkaller0>
[  271.268528][T13670] tipc: Resetting bearer <eth:syzkaller0>
[  271.311669][T13670] tipc: Disabling bearer <eth:syzkaller0>
[  271.477895][T13681] tipc: Enabled bearer <eth:syzkaller0>, priority 0
[  271.487264][T13682] syzkaller0: entered promiscuous mode
[  271.494834][T13682] syzkaller0: entered allmulticast mode
[  271.531771][T13682] tipc: Resetting bearer <eth:syzkaller0>
[  271.627588][T13682] tipc: Disabling bearer <eth:syzkaller0>
[  271.790137][T13693] netlink: 8 bytes leftover after parsing attributes in process `syz.4.2003'.
[  271.809495][T13694] bond0: (slave wlan0): Opening slave failed
[  271.819873][T13693] netlink: 4 bytes leftover after parsing attributes in process `syz.4.2003'.
[  271.829968][T13693] netlink: 8 bytes leftover after parsing attributes in process `syz.4.2003'.
[  271.839379][T13693] netlink: 4 bytes leftover after parsing attributes in process `syz.4.2003'.
[  271.873160][T13696] netlink: 'syz.1.2005': attribute type 1 has an invalid length.
[  271.926685][T13696] netlink: 8 bytes leftover after parsing attributes in process `syz.1.2005'.
[  271.945942][T13703] input: Bluetooth HID Boot Protocol Device as /devices/virtual/bluetooth/hci4/hci4:200/input6
[  272.394542][T13728] xt_hashlimit: size too large, truncated to 1048576
[  272.635103][T13737] team0: Port device syz_tun added
[  272.663067][T13731] tipc: Enabled bearer <eth:syzkaller0>, priority 0
[  272.667391][T13740] xt_TCPMSS: Only works on TCP SYN packets
[  272.692751][T13737] team0: Port device syz_tun removed
[  272.709078][T13731] syzkaller0: entered promiscuous mode
[  272.720595][T13731] syzkaller0: entered allmulticast mode
[  272.764006][   T30] audit: type=1800 audit(1780276992.500:4): pid=13744 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed(directio) comm="syz.1.2018" name="blkio.bfq.time_recursive" dev="tmpfs" ino=1938 res=0 errno=0
[  272.980579][T13748] netlink: 'syz.3.2020': attribute type 1 has an invalid length.
[  273.081227][T13748] 8021q: adding VLAN 0 to HW filter on device bond9
[  273.255844][T13730] tipc: Resetting bearer <eth:syzkaller0>
[  273.326123][T13730] tipc: Disabling bearer <eth:syzkaller0>
[  273.468776][    C0] ip6_tunnel: ip6gre1 xmit: Local address not yet configured!
[  274.115026][T13806] netlink: 'syz.3.2034': attribute type 1 has an invalid length.
[  274.842502][T13836] netlink: 'syz.0.2043': attribute type 9 has an invalid length.
[  275.051095][T13852] smbdirect: ib_dev[syz2]: added: RNIC max_fast_reg_page_list_len=256 device_cap_flags=0x200000 kernel_cap_flags=0x10 page_size_cap=0x1000
[  275.100334][T13852] smbdirect: ib_dev[syz2]: num_ports=1 max_qp_rd_atom=128 max_qp_init_rd_atom=128 max_sgl_rd=0 max_sge_rd=1 max_cqe=3276800 max_qp_wr=32768 max_send_sge=6 max_recv_sge=6
[  275.134274][T13852] smbdirect: ib_dev[syz2]PORT[1]: iwarp=1 ib=0 roce=0 v1=0 v2=0 core_cap_flags=0x400008
[  275.226679][T13852] infiniband syz2: RDMA CMA: cma_listen_on_dev, error -98
[  275.263371][T13863] __nla_validate_parse: 17 callbacks suppressed
[  275.263389][T13863] netlink: 1 bytes leftover after parsing attributes in process `syz.4.2050'.
[  275.495721][T13872] netlink: 'syz.2.2053': attribute type 32 has an invalid length.
[  275.669341][   T13] net_ratelimit: 140 callbacks suppressed
[  275.669359][   T13] bond5: (slave bridge4): failed to get link speed/duplex
[  275.689456][   T13] bond8: (slave �): failed to get link speed/duplex
[  275.752321][T13895] netlink: 12 bytes leftover after parsing attributes in process `syz.1.2060'.
[  275.789416][ T6813] bond5: (slave bridge4): failed to get link speed/duplex
[  275.848839][ T6813] bond8: (slave �): failed to get link speed/duplex
[  275.898957][ T6813] bond5: (slave bridge4): failed to get link speed/duplex
[  276.122449][T13908] netlink: 12 bytes leftover after parsing attributes in process `syz.0.2062'.
[  276.131932][T13908] netlink: 4 bytes leftover after parsing attributes in process `syz.0.2062'.
[  276.210829][T13900] batman_adv: batadv0: Interface deactivated: batadv_slave_1
[  276.395716][T13900] netdevsim netdevsim1 netdevsim0: left allmulticast mode
[  276.420366][T13900] bond2: left promiscuous mode
[  276.427023][T13900] bond3: left promiscuous mode
[  276.446630][T13900] bond4: left promiscuous mode
[  276.462915][T13900] tipc: Resetting bearer <eth:syzkaller0>
[  276.478230][T13900] bond5: left promiscuous mode
[  276.486765][T13900] bond5: left allmulticast mode
[  276.492047][T13900] vlan2: left allmulticast mode
[  276.496916][T13900] bond0: left allmulticast mode
[  276.502056][T13900] bond_slave_0: left allmulticast mode
[  276.507530][T13900] bond_slave_1: left allmulticast mode
[  276.524475][T13900] bond6: left promiscuous mode
[  276.541276][T13900] ip6tnl2: left allmulticast mode
[  276.553438][T13900] ip6gre1: left promiscuous mode
[  276.560203][T13900] ip6gre1: left allmulticast mode
[  276.604956][ T6803] netdevsim netdevsim1 netdevsim0: unset [0, 0] type 1 family 0 port 8472 - 0
[  276.614115][ T6803] netdevsim netdevsim1 netdevsim0: unset [1, 0] type 2 family 0 port 6081 - 0
[  276.623775][ T6803] netdevsim netdevsim1 netdevsim1: unset [0, 0] type 1 family 0 port 8472 - 0
[  276.633226][ T6803] netdevsim netdevsim1 netdevsim1: unset [1, 0] type 2 family 0 port 6081 - 0
[  276.642369][ T6803] netdevsim netdevsim1 netdevsim2: unset [0, 0] type 1 family 0 port 8472 - 0
[  276.651610][ T6803] netdevsim netdevsim1 netdevsim2: unset [1, 0] type 2 family 0 port 6081 - 0
[  276.670328][T13908] netlink: 12 bytes leftover after parsing attributes in process `syz.0.2062'.
[  276.670992][ T6803] bond5: (slave bridge4): failed to get link speed/duplex
[  276.686666][T13908] netlink: 4 bytes leftover after parsing attributes in process `syz.0.2062'.
[  276.721902][ T6813] bond8: (slave �): failed to get link speed/duplex
[  276.789164][  T114] bond5: (slave bridge4): failed to get link speed/duplex
[  276.839205][  T114] bond8: (slave �): failed to get link speed/duplex
[  276.914259][  T114] bond5: (slave bridge4): failed to get link speed/duplex
[  276.929943][T13915] netlink: 28 bytes leftover after parsing attributes in process `syz.1.2064'.
[  277.878945][ T5645] Bluetooth: hci4: command 0x0406 tx timeout
[  278.541662][T13878] nci: __nci_request: wait_for_completion_interruptible_timeout failed -512
[  278.956053][T13937] netlink: 4 bytes leftover after parsing attributes in process `syz.0.2070'.
[  278.975195][T13937] netlink: 4 bytes leftover after parsing attributes in process `syz.0.2070'.
[  279.003857][T13937] netlink: 4 bytes leftover after parsing attributes in process `syz.0.2070'.
[  279.516879][T13958] netlink: 'syz.0.2075': attribute type 10 has an invalid length.
[  279.783793][T13958] bridge0: port 3(syz_tun) entered disabled state
[  279.794580][T13958] syz_tun: left allmulticast mode
[  279.814188][T13958] bridge0: port 3(syz_tun) entered disabled state
[  279.914841][T13970] syzkaller0: entered promiscuous mode
[  279.920846][T13970] syzkaller0: entered allmulticast mode
[  280.082432][ T5645] block nbd1: Receive control failed (result -1)
[  280.117675][T13977] macvlan2: entered promiscuous mode
[  280.142691][T13977] gretap0: entered promiscuous mode
[  280.197619][T13977] gretap0: left promiscuous mode
[  280.678989][ T6810] net_ratelimit: 51 callbacks suppressed
[  280.679007][ T6810] bond5: (slave bridge4): failed to get link speed/duplex
[  280.728708][ T6810] bond8: (slave �): failed to get link speed/duplex
[  280.806613][T14011] x_tables: ip6_tables: TCPOPTSTRIP target: only valid in mangle table, not raw
[  280.821898][T14014] __nla_validate_parse: 36 callbacks suppressed
[  280.821917][T14014] netlink: 24 bytes leftover after parsing attributes in process `syz.2.2091'.
[  280.829999][ T6810] bond5: (slave bridge4): failed to get link speed/duplex
[  280.863742][T14013] netlink: 16402 bytes leftover after parsing attributes in process `syz.3.2090'.
[  280.884964][T14013] siw: device registration error -23
[  281.036573][T14014] netlink: 1 bytes leftover after parsing attributes in process `syz.2.2091'.
[  281.045624][ T6803] bond5: (slave bridge4): failed to get link speed/duplex
[  281.058500][T14014] openvswitch: netlink: Flow actions may not be safe on all matching packets.
[  281.088961][ T6803] bond8: (slave �): failed to get link speed/duplex
[  281.274943][ T6813] bond8: (slave �): failed to get link speed/duplex
[  281.299016][ T6813] bond5: (slave bridge4): failed to get link speed/duplex
[  281.418674][   T13] bond8: (slave �): failed to get link speed/duplex
[  281.429321][ T6803] bond5: (slave bridge4): failed to get link speed/duplex
[  281.561883][T14052] netlink: 'syz.3.2101': attribute type 15 has an invalid length.
[  281.578953][T14051] IPVS: set_ctl: invalid protocol: 50 10.1.1.1:20001
[  281.605938][T14052] netlink: 'syz.3.2101': attribute type 15 has an invalid length.
[  281.994928][T14083] ip6tnl0: Caught tx_queue_len zero misconfig
[  282.043267][T14084] netlink: 'syz.2.2107': attribute type 1 has an invalid length.
[  282.084534][T14084] sctp: [Deprecated]: syz.2.2107 (pid 14084) Use of struct sctp_assoc_value in delayed_ack socket option.
[  282.084534][T14084] Use struct sctp_sack_info instead
[  282.156106][T14094] netlink: 8 bytes leftover after parsing attributes in process `syz.0.2108'.
[  282.213136][T14094] netlink: 'syz.0.2108': attribute type 33 has an invalid length.
[  282.221458][T14094] netlink: 152 bytes leftover after parsing attributes in process `syz.0.2108'.
[  282.497409][T14100] netlink: 12 bytes leftover after parsing attributes in process `syz.1.2112'.
[  282.802856][T14113] netlink: 'syz.1.2117': attribute type 1 has an invalid length.
[  282.820009][T14113] sctp: [Deprecated]: syz.1.2117 (pid 14113) Use of struct sctp_assoc_value in delayed_ack socket option.
[  282.820009][T14113] Use struct sctp_sack_info instead
[  283.040942][T14117] tipc: Resetting bearer <eth:syzkaller0>
[  283.092209][T14119] netlink: 28 bytes leftover after parsing attributes in process `syz.1.2119'.
[  283.133398][T14117] syzkaller0: left promiscuous mode
[  283.164453][T14117] syzkaller0: left allmulticast mode
[  283.217693][T14139] xt_bpf: check failed: parse error
[  283.853208][T14157] netlink: 16 bytes leftover after parsing attributes in process `syz.0.2128'.
[  284.157887][T14169] syzkaller0: entered promiscuous mode
[  284.170269][T14169] syzkaller0: entered allmulticast mode
[  284.250094][T14186] bond0: (slave bond_slave_0): Releasing backup interface
[  284.272960][T14186] bond0: (slave bond_slave_1): Releasing backup interface
[  284.287885][T14186] team0: Port device team_slave_0 removed
[  284.314370][T14186] team0: Port device team_slave_1 removed
[  284.332222][T14186] batman_adv: batadv0: Removing interface: batadv_slave_1
[  284.346577][T14186] batman_adv: batadv0: Removing interface: macvtap1
[  284.360241][T14186] bond2: (slave bond3): Releasing backup interface
[  284.394879][T14186] netlink: 'syz.1.2135': attribute type 3 has an invalid length.
[  284.413103][T14186] netlink: 132 bytes leftover after parsing attributes in process `syz.1.2135'.
[  284.584254][T14192] netlink: 'syz.1.2136': attribute type 1 has an invalid length.
[  286.335699][T14192] workqueue: Failed to create a rescuer kthread for wq "bond8": -EINTR
[  286.338994][T14174] net_ratelimit: 41 callbacks suppressed
[  286.339012][T14174] bond8: (slave �): failed to get link speed/duplex
[  286.379272][T14178] bond5: (slave bridge4): failed to get link speed/duplex
[  286.462666][T14216] netlink: 32 bytes leftover after parsing attributes in process `syz.1.2141'.
[  286.478745][ T6818] bond8: (slave �): failed to get link speed/duplex
[  286.544646][T14218] netlink: 'syz.4.2142': attribute type 40 has an invalid length.
[  286.590422][ T6818] bond5: (slave bridge4): failed to get link speed/duplex
[  286.631304][ T6818] bond8: (slave �): failed to get link speed/duplex
[  286.723970][T14228] netlink: 4 bytes leftover after parsing attributes in process `syz.0.2146'.
[  286.759081][T14174] bond5: (slave bridge4): failed to get link speed/duplex
[  286.813319][T14232] netlink: 4 bytes leftover after parsing attributes in process `syz.2.2148'.
[  286.829229][ T6818] bond8: (slave �): failed to get link speed/duplex
[  286.856700][T14231] netlink: 4 bytes leftover after parsing attributes in process `syz.4.2147'.
[  286.872222][T14234] netlink: 16 bytes leftover after parsing attributes in process `syz.1.2149'.
[  286.921952][T14243] x_tables: ip_tables: osf match: only valid for protocol 6
[  287.107591][T14252] syzkaller0: entered promiscuous mode
[  287.125623][T14252] syzkaller0: entered allmulticast mode
[  287.159357][T14175] bond8: (slave �): failed to get link speed/duplex
[  287.342108][ T6818] bond5: (slave bridge4): failed to get link speed/duplex
[  287.370091][ T6818] bond8: (slave �): failed to get link speed/duplex
[  287.439741][T14273] netlink: 20 bytes leftover after parsing attributes in process `syz.4.2157'.
[  287.565253][T14278] x_tables: duplicate entry at hook 1
[  287.701709][T14293] IPVS: set_ctl: invalid protocol: 46 172.20.20.170:20004
[  288.017632][T14316] netlink: 4 bytes leftover after parsing attributes in process `syz.1.2170'.
[  288.071960][T14319] netlink: 12 bytes leftover after parsing attributes in process `syz.1.2170'.
[  288.166216][T14316] 8021q: adding VLAN 0 to HW filter on device bond0
[  288.181797][T14316] 8021q: adding VLAN 0 to HW filter on device team0
[  288.199859][T14316] 8021q: adding VLAN 0 to HW filter on device batadv0
[  288.257432][T14324] netlink: 8 bytes leftover after parsing attributes in process `syz.2.2173'.
[  288.449839][ T6382] ip6_tunnel: ip6gretap0 xmit: Local address not yet configured!
[  288.700673][T14356] netlink: 8 bytes leftover after parsing attributes in process `syz.0.2181'.
[  288.972019][T14366] netlink: 'syz.2.2185': attribute type 1 has an invalid length.
[  288.979398][ T6383] ip6_tunnel: ip6gretap0 xmit: Local address not yet configured!
[  289.033878][T14360] netlink: 'syz.0.2181': attribute type 1 has an invalid length.
[  289.238539][T14383] veth0: entered promiscuous mode
[  289.262916][T14377] veth0: left promiscuous mode
[  289.343760][T14392] netlink: 'syz.1.2192': attribute type 13 has an invalid length.
[  289.459183][ T6374] ip6_tunnel: ip6gretap0 xmit: Local address not yet configured!
[  289.659283][T14389] af_packet: tpacket_rcv: packet too big, clamped from 1 to 4294967272. macoff=96
[  289.751326][T14411] sch_tbf: burst 6 is lower than device gretap0 mtu (1476) !
[  289.823974][   T13] ip6_tunnel: ip6gretap0 xmit: Local address not yet configured!
[  289.854282][T14403] syzkaller1: entered promiscuous mode
[  289.871313][T14403] syzkaller1: entered allmulticast mode
[  290.189515][ T6372] ip6_tunnel: ip6gretap0 xmit: Local address not yet configured!
[  290.829461][   T13] ip6_tunnel: ip6gretap0 xmit: Local address not yet configured!
[  290.839644][   T13] ip6_tunnel: ip6gretap0 xmit: Local address not yet configured!
[  291.368891][ T6800] net_ratelimit: 48 callbacks suppressed
[  291.368925][ T6800] bond5: (slave bridge4): failed to get link speed/duplex
[  291.389102][ T6800] bond8: (slave �): failed to get link speed/duplex
[  291.409098][ T6372] ip6_tunnel: ip6gretap0 xmit: Local address not yet configured!
[  291.488796][ T6800] bond5: (slave bridge4): failed to get link speed/duplex
[  291.498962][ T6800] bond8: (slave �): failed to get link speed/duplex
[  291.598739][   T13] bond5: (slave bridge4): failed to get link speed/duplex
[  291.608852][   T13] bond8: (slave �): failed to get link speed/duplex
[  291.709275][T14174] bond5: (slave bridge4): failed to get link speed/duplex
[  291.718931][T14174] bond8: (slave �): failed to get link speed/duplex
[  291.759283][T14444] __nla_validate_parse: 5 callbacks suppressed
[  291.759302][T14444] netlink: 20 bytes leftover after parsing attributes in process `syz.1.2206'.
[  291.818834][T14178] bond5: (slave bridge4): failed to get link speed/duplex
[  291.859005][T14178] bond8: (slave �): failed to get link speed/duplex
[  291.971284][T14459] IPv6: sit2: Disabled Multicast RS
[  292.146761][T14473] bridge4: left allmulticast mode
[  292.166472][T14473] macvtap1: left promiscuous mode
[  292.189643][T14473] macvtap1: left allmulticast mode
[  292.210818][T14473] geneve2: left promiscuous mode
[  292.217941][T14473] bond8: left allmulticast mode
[  292.229677][T14473] bond9: left promiscuous mode
[  292.234508][T14473] bridge5: left promiscuous mode
[  292.256633][T14471] xfrm0: entered allmulticast mode
[  292.276017][T14479] geneve1: entered promiscuous mode
[  292.483776][T14501] netlink: 'syz.0.2222': attribute type 1 has an invalid length.
[  292.580698][T14501] bond6: entered promiscuous mode
[  292.586188][T14501] 8021q: adding VLAN 0 to HW filter on device bond6
[  292.594693][T14511] netlink: 28 bytes leftover after parsing attributes in process `syz.0.2222'.
[  292.774661][T14519] sch_tbf: burst 0 is lower than device ip6tnl0 mtu (1452) !
[  293.231017][T14524] xt_hashlimit: size too large, truncated to 1048576
[  293.384801][T14536] atomic_op ffff888076f67998 conn xmit_atomic 0000000000000000
[  293.472743][T14541] netlink: 4 bytes leftover after parsing attributes in process `syz.1.2232'.
[  293.482565][T14542] xt_TCPMSS: Only works on TCP SYN packets
[  295.068825][    C1] ip6_tunnel: ip6gretap0 xmit: Local address not yet configured!
[  295.340747][T14487] nci: __nci_request: wait_for_completion_interruptible_timeout failed -512
[  295.574925][T14575] netlink: 'syz.4.2239': attribute type 10 has an invalid length.
[  295.577943][T14573] netlink: 52 bytes leftover after parsing attributes in process `syz.0.2238'.
[  295.601735][T14575] syz_tun: entered promiscuous mode
[  295.607459][T14578] IPVS: set_ctl: invalid protocol: 0 255.255.255.255:20004
[  295.612701][T14575] bond0: (slave syz_tun): Enslaving as an active interface with an up link
[  295.881065][T14584] netlink: 'syz.1.2243': attribute type 1 has an invalid length.
[  296.220440][T14629] netlink: 876 bytes leftover after parsing attributes in process `syz.1.2250'.
[  296.229998][T14629] netlink: 8 bytes leftover after parsing attributes in process `syz.1.2250'.
[  296.430421][ T6372] ip6_tunnel: ip6gretap0 xmit: Local address not yet configured!
[  296.440459][ T6811] net_ratelimit: 77 callbacks suppressed
[  296.440476][ T6811] bond8: (slave �): failed to get link speed/duplex
[  296.464692][ T6811] bond5: (slave bridge4): failed to get link speed/duplex
[  296.516428][ T6372] ip6_tunnel: ip6gretap0 xmit: Local address not yet configured!
[  296.559028][T14178] bond8: (slave �): failed to get link speed/duplex
[  296.579453][T14178] bond5: (slave bridge4): failed to get link speed/duplex
[  296.669474][ T6811] bond8: (slave �): failed to get link speed/duplex
[  296.689281][ T6811] bond5: (slave bridge4): failed to get link speed/duplex
[  296.779097][ T6811] bond8: (slave �): failed to get link speed/duplex
[  296.798684][ T6811] bond5: (slave bridge4): failed to get link speed/duplex
[  296.898962][ T6811] bond8: (slave �): failed to get link speed/duplex
[  296.909144][   T48] bond5: (slave bridge4): failed to get link speed/duplex
[  298.583040][T14579] nci: __nci_request: wait_for_completion_interruptible_timeout failed -512
[  298.820790][T14662] netlink: 96 bytes leftover after parsing attributes in process `syz.0.2260'.
[  298.843481][T14663] IPVS: Schedule: port zero only supported in persistent services, check your ipvs configuration
[  298.965892][T14657] netlink: 8 bytes leftover after parsing attributes in process `syz.4.2261'.
[  299.126504][T14678] netlink: 'syz.4.2265': attribute type 1 has an invalid length.
[  299.192191][T14685] netlink: 28 bytes leftover after parsing attributes in process `syz.4.2265'.
[  299.234082][T14678] bond10: entered promiscuous mode
[  299.241833][T14678] 8021q: adding VLAN 0 to HW filter on device bond10
[  299.252552][T14685] bond10: entered allmulticast mode
[  299.394440][T14678] bond10: (slave bridge7): making interface the new active one
[  299.419468][T14678] bridge7: entered promiscuous mode
[  299.435001][T14678] bridge7: entered allmulticast mode
[  299.460787][T14678] bond10: (slave bridge7): Enslaving as an active interface with an up link
[  299.695571][T14703] tipc: Enabled bearer <udp:s>, priority 10
[  299.987907][T14713] lo speed is unknown, defaulting to 1000
[  300.611846][T14731] netlink: 4 bytes leftover after parsing attributes in process `syz.0.2280'.
[  302.245723][ T6374] tipc: Node number set to 3367798013
[  302.399394][T14178] net_ratelimit: 64 callbacks suppressed
[  302.399412][T14178] bond5: (slave bridge4): failed to get link speed/duplex
[  302.572230][T14178] bond5: (slave bridge4): failed to get link speed/duplex
[  302.589011][T14178] bond8: (slave �): failed to get link speed/duplex
[  302.688969][   T48] bond5: (slave bridge4): failed to get link speed/duplex
[  302.729057][   T48] bond8: (slave �): failed to get link speed/duplex
[  302.808840][   T48] bond5: (slave bridge4): failed to get link speed/duplex
[  302.851049][T14767] ipvlan1: Caught tx_queue_len zero misconfig
[  302.948758][ T6812] bond8: (slave �): failed to get link speed/duplex
[  302.969137][ T6812] bond5: (slave bridge4): failed to get link speed/duplex
[  303.079351][ T6807] bond8: (slave �): failed to get link speed/duplex
[  303.108441][T14774] syzkaller0: entered promiscuous mode
[  303.131287][T14774] syzkaller0: entered allmulticast mode
[  303.149879][ T6807] bond5: (slave bridge4): failed to get link speed/duplex
[  303.417113][T14788] netlink: 12 bytes leftover after parsing attributes in process `syz.4.2293'.
[  303.507528][T14791] netlink: 12 bytes leftover after parsing attributes in process `syz.4.2293'.
[  303.558892][    C1] ip6_tunnel: ip6gretap0 xmit: Local address not yet configured!
[  303.712760][T14778] syzkaller0: entered promiscuous mode
[  303.721065][T14778] syzkaller0: entered allmulticast mode
[  304.012703][T14805] netlink: 12 bytes leftover after parsing attributes in process `syz.0.2298'.
[  304.076177][T14808] syzkaller1: entered promiscuous mode
[  304.083989][T14808] syzkaller1: entered allmulticast mode
[  304.256647][T14811] sysfs: cannot create duplicate filename '/class/ieee80211/1��^!�Y������
[  304.256647][T14811] 3�UH�5r�Bn���\'
[  304.271394][T14811] CPU: 0 UID: 0 PID: 14811 Comm: syz.2.2300 Not tainted syzkaller #0 PREEMPT(full) 
[  304.271420][T14811] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 04/18/2026
[  304.271440][T14811] Call Trace:
[  304.271451][T14811]  <TASK>
[  304.271460][T14811]  dump_stack_lvl+0xe8/0x150
[  304.271489][T14811]  sysfs_warn_dup+0x8e/0xa0
[  304.271515][T14811]  sysfs_do_create_link_sd+0xc0/0x110
[  304.271545][T14811]  device_add_class_symlinks+0x1cf/0x240
[  304.271589][T14811]  device_add+0x475/0xbb0
[  304.271625][T14811]  wiphy_register+0x1fb1/0x2fe0
[  304.271674][T14811]  ? __pfx_wiphy_register+0x10/0x10
[  304.271704][T14811]  ? __pfx_netdev_run_todo+0x10/0x10
[  304.271727][T14811]  ? minstrel_ht_alloc+0x6e0/0x7e0
[  304.271759][T14811]  ? ieee80211_init_rate_ctrl_alg+0x55d/0x5d0
[  304.271792][T14811]  ieee80211_register_hw+0x3c53/0x4910
[  304.271825][T14811]  ? ieee80211_register_hw+0x1971/0x4910
[  304.271869][T14811]  ? __pfx_ieee80211_register_hw+0x10/0x10
[  304.271891][T14811]  ? __asan_memset+0x22/0x50
[  304.271916][T14811]  ? __hrtimer_setup+0x1b7/0x260
[  304.271946][T14811]  ? __pfx_mac80211_hwsim_beacon+0x10/0x10
[  304.271973][T14811]  mac80211_hwsim_new_radio+0x3306/0x57b0
[  304.272025][T14811]  ? __pfx_mac80211_hwsim_new_radio+0x10/0x10
[  304.272049][T14811]  ? __asan_memcpy+0x40/0x70
[  304.272077][T14811]  hwsim_new_radio_nl+0xd96/0xfa0
[  304.272112][T14811]  genl_family_rcv_msg_doit+0x22a/0x330
[  304.272145][T14811]  ? __pfx_genl_family_rcv_msg_doit+0x10/0x10
[  304.272184][T14811]  ? bpf_lsm_capable+0x9/0x20
[  304.272204][T14811]  ? security_capable+0x7e/0x2c0
[  304.272236][T14811]  genl_rcv_msg+0x61c/0x7a0
[  304.272282][T14811]  ? __pfx_genl_rcv_msg+0x10/0x10
[  304.272309][T14811]  ? __pfx_hwsim_new_radio_nl+0x10/0x10
[  304.272330][T14811]  ? __pfx_ref_tracker_free+0x10/0x10
[  304.272365][T14811]  netlink_rcv_skb+0x232/0x4b0
[  304.272388][T14811]  ? __pfx_genl_rcv_msg+0x10/0x10
[  304.272415][T14811]  ? __pfx_netlink_rcv_skb+0x10/0x10
[  304.272451][T14811]  ? down_read+0x270/0x2e0
[  304.272472][T14811]  ? genl_rcv+0xd/0x40
[  304.272499][T14811]  genl_rcv+0x28/0x40
[  304.272523][T14811]  netlink_unicast+0x75c/0x8e0
[  304.272554][T14811]  netlink_sendmsg+0x813/0xb40
[  304.272600][T14811]  ? __pfx_netlink_sendmsg+0x10/0x10
[  304.272626][T14811]  ? aa_sock_msg_perm+0xf1/0x1b0
[  304.272658][T14811]  ? bpf_lsm_socket_sendmsg+0x9/0x20
[  304.272691][T14811]  ____sys_sendmsg+0x972/0x9f0
[  304.272714][T14811]  ? __might_fault+0xaf/0x130
[  304.272747][T14811]  ? __pfx_____sys_sendmsg+0x10/0x10
[  304.272779][T14811]  ? import_iovec+0x73/0xa0
[  304.272805][T14811]  ___sys_sendmsg+0x2a5/0x360
[  304.272827][T14811]  ? __lock_acquire+0x6b5/0x2cf0
[  304.272851][T14811]  ? __pfx____sys_sendmsg+0x10/0x10
[  304.272879][T14811]  ? futex_wake+0x4ac/0x580
[  304.272934][T14811]  ? __fget_files+0x2a/0x420
[  304.272957][T14811]  ? __fget_files+0x3a0/0x420
[  304.272994][T14811]  __x64_sys_sendmsg+0x1bd/0x2a0
[  304.273023][T14811]  ? __pfx___x64_sys_sendmsg+0x10/0x10
[  304.273056][T14811]  ? rcu_is_watching+0x15/0xb0
[  304.273090][T14811]  ? entry_SYSCALL_64_after_hwframe+0x77/0x7f
[  304.273114][T14811]  do_syscall_64+0x174/0x580
[  304.273134][T14811]  ? trace_irq_disable+0x3b/0x140
[  304.273164][T14811]  ? clear_bhb_loop+0x40/0x90
[  304.273187][T14811]  entry_SYSCALL_64_after_hwframe+0x77/0x7f
[  304.273205][T14811] RIP: 0033:0x7fbd5b39ce59
[  304.273232][T14811] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48
[  304.273249][T14811] RSP: 002b:00007fbd5c2aa028 EFLAGS: 00000246 ORIG_RAX: 000000000000002e
[  304.273273][T14811] RAX: ffffffffffffffda RBX: 00007fbd5b615fa0 RCX: 00007fbd5b39ce59
[  304.273287][T14811] RDX: 0000000000000000 RSI: 00002000000000c0 RDI: 0000000000000003
[  304.273299][T14811] RBP: 00007fbd5b432d6f R08: 0000000000000000 R09: 0000000000000000
[  304.273311][T14811] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000
[  304.273322][T14811] R13: 00007fbd5b616038 R14: 00007fbd5b615fa0 R15: 00007ffcf0ce8e38
[  304.273356][T14811]  </TASK>
[  304.692711][T14801] Bluetooth: hci0: Opcode 0x0c03 failed: -4
[  304.782771][T14812] llcp: nfc_llcp_send_ui_frame: Could not allocate PDU (error=-512)
[  304.804898][T14812] llcp: nfc_llcp_send_ui_frame: Could not allocate PDU (error=-512)
[  304.864428][T14830] netlink: 8 bytes leftover after parsing attributes in process `syz.3.2305'.
[  304.871657][T14811] 8021q: adding VLAN 0 to HW filter on device bond8
[  304.952468][T14830] netlink: 8 bytes leftover after parsing attributes in process `syz.3.2305'.
[  304.965569][T14825] netlink: 16 bytes leftover after parsing attributes in process `syz.0.2304'.
[  305.002501][T14837] sctp: [Deprecated]: syz.2.2306 (pid 14837) Use of struct sctp_assoc_value in delayed_ack socket option.
[  305.002501][T14837] Use struct sctp_sack_info instead
[  305.126589][T14844] IPVS: set_ctl: invalid protocol: 1 172.20.20.187:20004
[  305.162571][T14840] syzkaller1: entered promiscuous mode
[  305.180999][T14840] syzkaller1: entered allmulticast mode
[  305.303175][T14852] batadv_slave_0: entered promiscuous mode
[  305.322115][T14852] netlink: 4 bytes leftover after parsing attributes in process `syz.2.2310'.
[  305.324338][T14854] netlink: 12 bytes leftover after parsing attributes in process `syz.3.2311'.
[  305.361382][T14854] pim6reg: entered allmulticast mode
[  305.373884][T14852] batman_adv: batadv0: Interface deactivated: batadv_slave_1
[  305.435851][T14852] batman_adv: batadv0: Removing interface: batadv_slave_1
[  305.500647][T14851] batadv_slave_0: left promiscuous mode
[  305.540385][T14861] bond11: Unable to set down delay as MII monitoring is disabled
[  305.562357][T14861] bond11 (unregistering): Released all slaves
[  305.752275][T14861] netlink: 12 bytes leftover after parsing attributes in process `syz.3.2314'.
[  305.803203][T14864] netlink: 12 bytes leftover after parsing attributes in process `syz.3.2314'.
[  305.826141][T14865] netlink: 4 bytes leftover after parsing attributes in process `syz.2.2315'.
[  305.864015][T14861] bridge0: port 1(batadv1) entered blocking state
[  305.884388][T14861] bridge0: port 1(batadv1) entered disabled state
[  305.893054][T14861] batadv1: entered allmulticast mode
[  305.902924][T14861] batadv1: entered promiscuous mode
[  305.999574][T14900] netlink: 76 bytes leftover after parsing attributes in process `syz.3.2322'.
[  306.359004][ T6807] batman_adv: batadv1: No IGMP Querier present - multicast optimizations disabled
[  306.368838][ T6807] batman_adv: batadv1: No MLD Querier present - multicast optimizations disabled
[  306.455136][T14934] bond9: option fail_over_mac: invalid value (127)
[  306.466358][T14934] bond9 (unregistering): Released all slaves
[  306.666431][T14940] bridge0: port 1(bridge_slave_0) entered disabled state
[  307.488737][ T6812] net_ratelimit: 44 callbacks suppressed
[  307.488757][ T6812] bond5: (slave bridge4): failed to get link speed/duplex
[  307.509115][ T6812] bond8: (slave �): failed to get link speed/duplex
[  307.618754][ T6807] bond5: (slave bridge4): failed to get link speed/duplex
[  307.638692][ T6807] bond8: (slave �): failed to get link speed/duplex
[  307.728748][ T6811] bond5: (slave bridge4): failed to get link speed/duplex
[  307.749089][ T6811] bond8: (slave �): failed to get link speed/duplex
[  307.838755][T14178] bond5: (slave bridge4): failed to get link speed/duplex
[  307.858732][T14178] bond8: (slave �): failed to get link speed/duplex
[  307.948807][T14178] bond5: (slave bridge4): failed to get link speed/duplex
[  307.978710][T14178] bond8: (slave �): failed to get link speed/duplex
[  308.695374][T14878] nci: __nci_request: wait_for_completion_interruptible_timeout failed -512
[  309.144664][T14971] __nla_validate_parse: 3 callbacks suppressed
[  309.144682][T14971] netlink: 12 bytes leftover after parsing attributes in process `syz.4.2341'.
[  309.160579][T14970] netlink: 20 bytes leftover after parsing attributes in process `syz.3.2340'.
[  309.365955][T14977] syzkaller1: entered promiscuous mode
[  309.379433][T14977] syzkaller1: entered allmulticast mode
[  309.587576][T14980] netlink: 'syz.2.2343': attribute type 29 has an invalid length.
[  310.026226][T15004] netlink: 4 bytes leftover after parsing attributes in process `syz.0.2346'.
[  310.213757][T15013] netlink: 8 bytes leftover after parsing attributes in process `syz.4.2351'.
[  310.233755][T15009] netlink: 12 bytes leftover after parsing attributes in process `syz.1.2349'.
[  310.321911][T15013] xt_l2tp: invalid flags combination: 8
[  310.344076][T15021] netlink: 36 bytes leftover after parsing attributes in process `syz.3.2352'.
[  310.359828][T15021] netlink: 8 bytes leftover after parsing attributes in process `syz.3.2352'.
[  310.376035][T15013] netlink: 'syz.4.2351': attribute type 1 has an invalid length.
[  310.415452][T15015] netlink: 'syz.4.2351': attribute type 1 has an invalid length.
[  310.585260][T15036] syzkaller1: entered promiscuous mode
[  310.604911][T15036] syzkaller1: entered allmulticast mode
[  310.782874][T15048] netlink: 12 bytes leftover after parsing attributes in process `syz.0.2357'.
[  310.950546][T15057] netlink: 4 bytes leftover after parsing attributes in process `syz.0.2357'.
[  310.969492][T15048] 8021q: adding VLAN 0 to HW filter on device bond7
[  311.067698][T15053] 8021q: adding VLAN 0 to HW filter on device bond8
[  311.082758][T15053] bond7: (slave bond8): Enslaving as an active interface with an up link
[  311.300393][T15066] netlink: 20 bytes leftover after parsing attributes in process `syz.1.2364'.
[  311.346767][T15057] bond7 (unregistering): (slave bond8): Releasing backup interface
[  311.359962][T15057] bond7 (unregistering): Released all slaves
[  311.393400][T15053] erspan1: entered promiscuous mode
[  311.398751][T15053] erspan1: entered allmulticast mode
[  312.063480][T15079] bridge0: port 2(bridge_slave_1) entered disabled state
[  312.369006][T15079] batman_adv: batadv0: Interface deactivated: batadv_slave_1
[  312.649136][ T6807] net_ratelimit: 55 callbacks suppressed
[  312.649158][ T6807] bond5: (slave bridge4): failed to get link speed/duplex
[  312.705707][T15105] veth7: entered allmulticast mode
[  312.791948][T15118] bond11: option primary_reselect: invalid value (6)
[  312.809752][T15118] bond11 (unregistering): Released all slaves
[  312.839800][T14178] netdevsim netdevsim3 eth0: unset [0, 0] type 1 family 0 port 8472 - 0
[  312.848388][T14178] netdevsim netdevsim3 eth0: unset [1, 0] type 2 family 0 port 20004 - 0
[  312.861490][T14178] netdevsim netdevsim3 eth0: unset [1, 1] type 2 family 0 port 6081 - 0
[  312.893682][T14178] netdevsim netdevsim3 eth1: unset [0, 0] type 1 family 0 port 8472 - 0
[  312.918444][T14178] netdevsim netdevsim3 eth1: unset [1, 0] type 2 family 0 port 20004 - 0
[  312.927485][T14178] netdevsim netdevsim3 eth1: unset [1, 1] type 2 family 0 port 6081 - 0
[  312.965963][ T6378] uyz0: Port: 1 Link DOWN
[  312.991090][T14178] netdevsim netdevsim3 eth2: unset [0, 0] type 1 family 0 port 8472 - 0
[  313.005154][T14178] netdevsim netdevsim3 eth2: unset [1, 0] type 2 family 0 port 20004 - 0
[  313.028879][T14178] netdevsim netdevsim3 eth2: unset [1, 1] type 2 family 0 port 6081 - 0
[  313.043065][T14178] netdevsim netdevsim3 eth3: unset [0, 0] type 1 family 0 port 8472 - 0
[  313.062597][T14178] netdevsim netdevsim3 eth3: unset [1, 0] type 2 family 0 port 20004 - 0
[  313.081916][T14178] netdevsim netdevsim3 eth3: unset [1, 1] type 2 family 0 port 6081 - 0
[  313.259476][T14178] bond5: (slave bridge4): failed to get link speed/duplex
[  313.296750][T15144] lo speed is unknown, defaulting to 1000
[  313.323753][T15156] netlink: 'syz.3.2387': attribute type 13 has an invalid length.
[  313.361463][T15156] gretap0: refused to change device tx_queue_len
[  313.376952][T15156] A link change request failed with some changes committed already. Interface gretap0 may have been left with an inconsistent configuration, please check.
[  313.418756][T14178] bond5: (slave bridge4): failed to get link speed/duplex
[  313.598817][ T6807] bond5: (slave bridge4): failed to get link speed/duplex
[  313.769791][T14178] bond5: (slave bridge4): failed to get link speed/duplex
[  314.006906][T15179] tipc: Enabling of bearer <eth:syzkaller0> rejected, already enabled
[  314.259937][ T6807] bond5: (slave bridge4): failed to get link speed/duplex
[  314.358035][T15204] __nla_validate_parse: 18 callbacks suppressed
[  314.358054][T15204] netlink: 8 bytes leftover after parsing attributes in process `syz.0.2400'.
[  314.399174][T14174] bond5: (slave bridge4): failed to get link speed/duplex
[  314.530576][T14174] bond5: (slave bridge4): failed to get link speed/duplex
[  314.622200][T15210] syzkaller1: entered promiscuous mode
[  314.642956][T15210] syzkaller1: entered allmulticast mode
[  314.679200][T14174] bond5: (slave bridge4): failed to get link speed/duplex
[  314.905174][T15214] netlink: 220 bytes leftover after parsing attributes in process `syz.0.2403'.
[  314.953515][T15214] netlink: 'syz.0.2403': attribute type 2 has an invalid length.
[  315.048406][T15214] netlink: 1624 bytes leftover after parsing attributes in process `syz.0.2403'.
[  315.067332][T15215] netlink: 1624 bytes leftover after parsing attributes in process `syz.0.2403'.
[  315.300780][T15221] IPVS: Schedule: port zero only supported in persistent services, check your ipvs configuration
[  315.350290][T15223] lo speed is unknown, defaulting to 1000
[  315.366603][T15219] IPVS: Scheduler module ip_vs_sip not found
[  316.637977][T15289] netlink: 49 bytes leftover after parsing attributes in process `syz.0.2423'.
[  316.665114][T15289] netlink: 140 bytes leftover after parsing attributes in process `syz.0.2423'.
[  316.688017][T15289] netlink: 49 bytes leftover after parsing attributes in process `syz.0.2423'.
[  316.711577][T15287] netlink: 32 bytes leftover after parsing attributes in process `syz.4.2424'.
[  316.755744][T15291] netlink: 28 bytes leftover after parsing attributes in process `syz.0.2423'.
[  316.771015][T15287] netlink: 'syz.4.2424': attribute type 1 has an invalid length.
[  316.795515][T15285] netlink: 8 bytes leftover after parsing attributes in process `syz.0.2423'.
[  317.032544][T15287] bond11: entered promiscuous mode
[  317.048009][T15287] 8021q: adding VLAN 0 to HW filter on device bond11
[  317.371809][T15306] xt_ecn: cannot match TCP bits for non-tcp packets
[  317.564578][T15312] bridge_slave_1: entered allmulticast mode
[  317.650284][T15320] ��: renamed from lo
[  317.695856][T15320] netlink: 'syz.3.2432': attribute type 1 has an invalid length.
[  317.760341][T15324] veth5: entered allmulticast mode
[  317.801709][    C0] vcan0: j1939_tp_rxtimer: 0xffff88805825a800: rx timeout, send abort
[  317.838020][T15320] bond11: entered promiscuous mode
[  317.851032][T15320] 8021q: adding VLAN 0 to HW filter on device bond11
[  317.957411][T15320] bond11: (slave bridge5): making interface the new active one
[  317.981252][T15320] bridge5: entered promiscuous mode
[  317.996311][T15320] bond11: (slave bridge5): Enslaving as an active interface with an up link
[  318.069473][T15333] bond10: down delay (5) is not a multiple of miimon (2), value rounded to 4 ms
[  318.098220][T15333] bond10: entered promiscuous mode
[  318.169358][T14178] net_ratelimit: 16 callbacks suppressed
[  318.169378][T14178] bond5: (slave bridge4): failed to get link speed/duplex
[  318.175321][T15350] x_tables: duplicate underflow at hook 1
[  318.239085][T15353] 8021q: adding VLAN 0 to HW filter on device macvlan2
[  318.298985][ T6808] bond5: (slave bridge4): failed to get link speed/duplex
[  318.312374][    C0] vcan0: j1939_tp_rxtimer: 0xffff88805825a800: abort rx timeout. Force session deactivation
[  318.499181][ T6808] bond5: (slave bridge4): failed to get link speed/duplex
[  318.628789][ T6808] bond5: (slave bridge4): failed to get link speed/duplex
[  318.757810][T15385] netlink: 'syz.4.2450': attribute type 1 has an invalid length.
[  318.766255][T14174] bond5: (slave bridge4): failed to get link speed/duplex
[  318.811578][T15391] netlink: 'syz.4.2450': attribute type 1 has an invalid length.
[  318.870519][ T6808] bond5: (slave bridge4): failed to get link speed/duplex
[  318.988853][ T6812] bond5: (slave bridge4): failed to get link speed/duplex
[  319.199801][T14178] bond5: (slave bridge4): failed to get link speed/duplex
[  319.368714][ T6812] bond5: (slave bridge4): failed to get link speed/duplex
[  319.409844][T15424] __nla_validate_parse: 18 callbacks suppressed
[  319.409860][T15424] netlink: 4 bytes leftover after parsing attributes in process `syz.2.2459'.
[  319.572151][T15437] netlink: 20 bytes leftover after parsing attributes in process `syz.4.2463'.
[  319.590666][T15440] IPVS: Schedule: port zero only supported in persistent services, check your ipvs configuration
[  319.628902][T14178] bond5: (slave bridge4): failed to get link speed/duplex
[  319.672800][T15441] 8021q: VLANs not supported on wg2
[  319.718311][T15443] netlink: 'syz.2.2465': attribute type 1 has an invalid length.
[  319.806125][T15452] netlink: 16 bytes leftover after parsing attributes in process `syz.2.2465'.
[  319.817148][T15455] xt_TPROXY: Can be used only with -p tcp or -p udp
[  319.826022][T15451] netlink: 64 bytes leftover after parsing attributes in process `syz.4.2467'.
[  319.831739][T15443] 8021q: adding VLAN 0 to HW filter on device bond11
[  319.854216][T15452] veth0_virt_wifi: entered promiscuous mode
[  319.866971][T15452] bond11: (slave veth0_virt_wifi): making interface the new active one
[  319.880833][T15452] bond11: (slave veth0_virt_wifi): Enslaving as an active interface with an up link
[  319.932691][T15443] bond11: (slave veth0_virt_wifi): Releasing active interface
[  320.133264][T15468] netlink: 'syz.2.2471': attribute type 1 has an invalid length.
[  320.309957][T15479] netlink: 24 bytes leftover after parsing attributes in process `syz.1.2476'.
[  320.382728][T15482] netlink: 'syz.2.2477': attribute type 12 has an invalid length.
[  320.403272][T15482] netlink: 8 bytes leftover after parsing attributes in process `syz.2.2477'.
[  320.424397][T15482] pim6reg1: entered promiscuous mode
[  320.433467][T15482] pim6reg1: entered allmulticast mode
[  320.440710][T15481] lo speed is unknown, defaulting to 1000
[  320.673347][T15493] netlink: 'syz.3.2478': attribute type 1 has an invalid length.
[  320.703432][T15495] netlink: 'syz.2.2479': attribute type 2 has an invalid length.
[  320.721602][T15495] netlink: 'syz.2.2479': attribute type 8 has an invalid length.
[  320.742353][T15495] netlink: 132 bytes leftover after parsing attributes in process `syz.2.2479'.
[  320.753774][T15493] bond12: entered promiscuous mode
[  320.760118][T15493] 8021q: adding VLAN 0 to HW filter on device bond12
[  320.829064][    C1] ip6_tunnel: ip6gretap0 xmit: Local address not yet configured!
[  321.086028][T15515] netlink: 12 bytes leftover after parsing attributes in process `syz.2.2484'.
[  321.193469][T15519] netlink: 8 bytes leftover after parsing attributes in process `syz.4.2486'.
[  321.216602][T15519] netlink: 4 bytes leftover after parsing attributes in process `syz.4.2486'.
[  321.242135][T15519] netlink: 'syz.4.2486': attribute type 18 has an invalid length.
[  321.644798][T15544] xt_cgroup: invalid path, errno=-2
[  322.093394][T15556] bond0: (slave wlan0): Enslaving as an active interface with an up link
[  322.355554][T15578] RDS: rds_bind could not find a transport for ::ffff:172.20.20.170, load rds_tcp or rds_rdma?
[  322.421498][T15578] team_slave_1: Caught tx_queue_len zero misconfig
[  322.617831][T14178] netdevsim netdevsim3 eth0: set [0, 0] type 1 family 0 port 8472 - 0
[  322.641074][T14178] netdevsim netdevsim3 eth1: set [0, 0] type 1 family 0 port 8472 - 0
[  322.651447][T14178] netdevsim netdevsim3 eth2: set [0, 0] type 1 family 0 port 8472 - 0
[  322.681818][T14178] netdevsim netdevsim3 eth3: set [0, 0] type 1 family 0 port 8472 - 0
[  323.065062][T15619] lo speed is unknown, defaulting to 1000
[  323.229384][  T135] net_ratelimit: 23 callbacks suppressed
[  323.229403][  T135] bond5: (slave bridge4): failed to get link speed/duplex
[  323.379241][  T135] bond5: (slave bridge4): failed to get link speed/duplex
[  323.509455][  T135] bond5: (slave bridge4): failed to get link speed/duplex
[  323.769691][ T6808] bond5: (slave bridge4): failed to get link speed/duplex
[  324.192591][T14178] bond5: (slave bridge4): failed to get link speed/duplex
[  324.328686][T14178] bond5: (slave bridge4): failed to get link speed/duplex
[  324.449213][   T48] bond5: (slave bridge4): failed to get link speed/duplex
[  324.688766][T14174] bond5: (slave bridge4): failed to get link speed/duplex
[  324.849903][T14178] bond5: (slave bridge4): failed to get link speed/duplex
[  324.895733][T15708] pim6reg1: entered promiscuous mode
[  324.901511][T15694] __nla_validate_parse: 9 callbacks suppressed
[  324.901527][T15694] netlink: 20 bytes leftover after parsing attributes in process `syz.3.2526'.
[  324.917893][T15708] pim6reg1: entered allmulticast mode
[  324.956726][T15694] nbd: device at index 64 is going down
[  325.048788][  T135] bond5: (slave bridge4): failed to get link speed/duplex
[  325.165113][T10135] udevd[10135]: inotify_add_watch(7, /dev/nbd64, 10) failed: No such file or directory
[  326.154746][T15767] netlink: 'syz.3.2546': attribute type 1 has an invalid length.
[  326.263932][T15776] netlink: 28 bytes leftover after parsing attributes in process `syz.3.2546'.
[  326.316864][T15767] bond13: entered promiscuous mode
[  326.342472][T15780] netlink: 'syz.3.2546': attribute type 1 has an invalid length.
[  326.355185][T15767] 8021q: adding VLAN 0 to HW filter on device bond13
[  326.371766][T15780] netlink: 224 bytes leftover after parsing attributes in process `syz.3.2546'.
[  326.477675][T15767] bond13: (slave bridge6): making interface the new active one
[  326.512461][T15767] bridge6: entered promiscuous mode
[  326.532868][T15767] bond13: (slave bridge6): Enslaving as an active interface with an up link
[  327.353583][T15821] netlink: 100 bytes leftover after parsing attributes in process `syz.1.2558'.
[  328.138396][T15867] netlink: 12 bytes leftover after parsing attributes in process `syz.1.2571'.
[  328.209979][T15867] 8021q: adding VLAN 0 to HW filter on device bond9
[  328.221424][T15873] bond9: entered promiscuous mode
[  328.226851][T15873] bond9: entered allmulticast mode
[  328.237456][T15873] 8021q: adding VLAN 0 to HW filter on device bond9
[  328.246367][T15873] team0: Port device bond9 added
[  328.270287][  T135] net_ratelimit: 23 callbacks suppressed
[  328.270306][  T135] bond5: (slave bridge4): failed to get link speed/duplex
[  328.306170][T15873] netlink: 28 bytes leftover after parsing attributes in process `syz.1.2571'.
[  328.396455][T15884] netlink: 'syz.1.2571': attribute type 11 has an invalid length.
[  328.404488][  T135] bond5: (slave bridge4): failed to get link speed/duplex
[  328.476270][T15876] lo speed is unknown, defaulting to 1000
[  328.509729][T14178] bond5: (slave bridge4): failed to get link speed/duplex
[  328.679811][T14178] bond5: (slave bridge4): failed to get link speed/duplex
[  328.779208][T15852] Bluetooth: hci0: Opcode 0x0c03 failed: -4
[  328.800250][T14174] bond5: (slave bridge4): failed to get link speed/duplex
[  328.929173][ T6812] bond5: (slave bridge4): failed to get link speed/duplex
[  328.952658][T15903] netlink: 4 bytes leftover after parsing attributes in process `syz.0.2579'.
[  329.004845][T15906] netlink: 24 bytes leftover after parsing attributes in process `syz.1.2578'.
[  329.204962][T15916] netlink: 160 bytes leftover after parsing attributes in process `syz.4.2581'.
[  329.219381][ T6812] bond5: (slave bridge4): failed to get link speed/duplex
[  329.250577][T15916] netlink: 'syz.4.2581': attribute type 11 has an invalid length.
[  329.294905][T15917] netlink: 'syz.4.2581': attribute type 11 has an invalid length.
[  329.352679][ T6809] bond5: (slave bridge4): failed to get link speed/duplex
[  329.441920][T15927] netlink: 12 bytes leftover after parsing attributes in process `syz.4.2581'.
[  329.464946][T15928] openvswitch: netlink: Flow actions attr not present in new flow.
[  329.480864][ T6809] bond5: (slave bridge4): failed to get link speed/duplex
[  329.577959][T15932] syzkaller0: entered promiscuous mode
[  329.597758][T15932] syzkaller0: entered allmulticast mode
[  329.883556][   T30] audit: type=1800 audit(1780277049.620:5): pid=15942 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed(directio) comm="syz.4.2590" name="r" dev="tmpfs" ino=2647 res=0 errno=0
[  329.936831][T15944] netlink: 'syz.1.2591': attribute type 3 has an invalid length.
[  330.067816][T15948] bridge0: port 2(bridge_slave_1) entered disabled state
[  330.075156][T15948] bridge0: port 1(bridge_slave_0) entered disabled state
[  330.319431][T15948] tipc: Resetting bearer <eth:batadv_slave_1>
[  330.346902][T15971] __nla_validate_parse: 2 callbacks suppressed
[  330.346920][T15971] netlink: 128 bytes leftover after parsing attributes in process `syz.2.2597'.
[  330.536130][T15944] bond10: (slave lo): enslaved VLAN challenged slave. Adding VLANs will be blocked as long as it is part of bond.
[  330.581382][T15944] bond10: (slave lo): Enslaving as an active interface with an up link
[  330.620860][T15980] netlink: 16 bytes leftover after parsing attributes in process `syz.0.2598'.
[  330.642198][  T135] netdevsim netdevsim0 netdevsim0: unset [0, 0] type 1 family 0 port 8472 - 0
[  330.655289][  T135] netdevsim netdevsim0 netdevsim0: unset [1, 0] type 2 family 0 port 6081 - 0
[  330.675766][  T135] netdevsim netdevsim0 netdevsim1: unset [0, 0] type 1 family 0 port 8472 - 0
[  330.692595][  T135] netdevsim netdevsim0 netdevsim1: unset [1, 0] type 2 family 0 port 6081 - 0
[  330.797257][T15980] 8021q: adding VLAN 0 to HW filter on device 

[  330.862939][T15989] netlink: 'syz.2.2600': attribute type 10 has an invalid length.
[  330.877311][T15980] tipc: Resetting bearer <eth:batadv_slave_1>
[  330.890584][T15980] tipc: Resetting bearer <eth:batadv_slave_1>
[  330.904774][T15980] hsr0: A HSR master's MTU cannot be greater than the smallest MTU of its slaves minus the HSR Tag length (6 octets).
[  330.918083][T15991] netlink: 'syz.2.2600': attribute type 10 has an invalid length.
[  330.926344][  T135] netdevsim netdevsim0 netdevsim2: unset [0, 0] type 1 family 0 port 8472 - 0
[  330.948811][  T135] netdevsim netdevsim0 netdevsim2: unset [1, 0] type 2 family 0 port 6081 - 0
[  330.969553][T15988] netlink: 8 bytes leftover after parsing attributes in process `syz.2.2600'.
[  331.057430][T14178] bridge0: port 1(bridge_slave_0) entered blocking state
[  331.064588][T14178] bridge0: port 1(bridge_slave_0) entered forwarding state
[  331.091208][T14178] bridge0: port 2(bridge_slave_1) entered blocking state
[  331.098458][T14178] bridge0: port 2(bridge_slave_1) entered forwarding state
[  331.155637][T15991] dummy0: entered allmulticast mode
[  331.169726][T15991] bond0: (slave dummy0): Enslaving as an active interface with an up link
[  331.181203][  T135] netdevsim netdevsim0 netdevsim3: unset [0, 0] type 1 family 0 port 8472 - 0
[  331.204584][  T135] netdevsim netdevsim0 netdevsim3: unset [1, 0] type 2 family 0 port 6081 - 0
[  331.208836][T16003] sctp: [Deprecated]: syz.4.2603 (pid 16003) Use of struct sctp_assoc_value in delayed_ack socket option.
[  331.208836][T16003] Use struct sctp_sack_info instead
[  331.323071][T16009] netlink: 32 bytes leftover after parsing attributes in process `syz.2.2605'.
[  331.425260][T16019] netlink: 32 bytes leftover after parsing attributes in process `syz.2.2608'.
[  331.446425][T16019] netlink: 8 bytes leftover after parsing attributes in process `syz.2.2608'.
[  331.565844][T16023] netlink: 4 bytes leftover after parsing attributes in process `syz.2.2610'.
[  331.763136][T16038] netlink: 4 bytes leftover after parsing attributes in process `syz.2.2610'.
[  331.812743][T16041] netlink: 'syz.0.2611': attribute type 10 has an invalid length.
[  332.131893][T16033] bridge_slave_0: left allmulticast mode
[  332.147250][T16033] bridge_slave_0: left promiscuous mode
[  332.156201][T16033] bridge0: port 1(bridge_slave_0) entered disabled state
[  332.183194][T16033] bridge_slave_1: left allmulticast mode
[  332.192211][T16033] bridge_slave_1: left promiscuous mode
[  332.198094][T16033] bridge0: port 2(bridge_slave_1) entered disabled state
[  332.212584][T16033] 
: (slave bond_slave_0): Releasing backup interface
[  332.227315][T16033] 
: (slave bond_slave_1): Releasing backup interface
[  332.308485][T16036] lo speed is unknown, defaulting to 1000
[  332.320606][T16044] netlink: 20 bytes leftover after parsing attributes in process `syz.3.2613'.
[  332.420954][T16050] netlink: 4 bytes leftover after parsing attributes in process `syz.4.2615'.
[  332.478481][T16051] netlink: 'syz.4.2615': attribute type 16 has an invalid length.
[  333.377961][T16081] raw_sendmsg: syz.2.2622 forgot to set AF_INET. Fix it!
[  333.812145][T16090] syzkaller0: entered promiscuous mode
[  333.817631][T16090] syzkaller0: entered allmulticast mode
[  335.506382][T16056] nci: __nci_request: wait_for_completion_interruptible_timeout failed -512
[  336.378329][T16117] netlink: 'syz.0.2631': attribute type 1 has an invalid length.
[  336.387385][T16117] netlink: 'syz.0.2631': attribute type 2 has an invalid length.
[  336.415227][T16111] syzkaller0: Caught tx_queue_len zero misconfig
[  336.555854][T16117] lo speed is unknown, defaulting to 1000
[  336.728295][T16131] __nla_validate_parse: 2 callbacks suppressed
[  336.728314][T16131] netlink: 32 bytes leftover after parsing attributes in process `syz.3.2636'.
[  336.825373][T16136] sctp: [Deprecated]: syz.3.2637 (pid 16136) Use of struct sctp_assoc_value in delayed_ack socket option.
[  336.825373][T16136] Use struct sctp_sack_info instead
[  337.129695][T16146] netlink: 128 bytes leftover after parsing attributes in process `syz.3.2639'.
[  337.141039][T16146] net_ratelimit: 6 callbacks suppressed
[  337.141057][T16146] A link change request failed with some changes committed already. Interface 
2
6�� may have been left with an inconsistent configuration, please check.
[  337.213215][T16149] netlink: 'syz.2.2640': attribute type 5 has an invalid length.
[  337.275111][T16153] netlink: 36 bytes leftover after parsing attributes in process `syz.3.2641'.
[  337.284908][T16154] netlink: 36 bytes leftover after parsing attributes in process `syz.3.2641'.
[  337.646188][T16173] syzkaller0: entered promiscuous mode
[  337.675635][T16173] syzkaller0: entered allmulticast mode
[  337.839153][T16185] netlink: 8 bytes leftover after parsing attributes in process `syz.4.2647'.
[  337.881135][T16184] netlink: 20 bytes leftover after parsing attributes in process `syz.0.2648'.
[  338.003053][T16192] netlink: 36 bytes leftover after parsing attributes in process `syz.2.2649'.
[  338.419499][T16209] netlink: 207952 bytes leftover after parsing attributes in process `syz.4.2653'.
[  338.477927][T16214] netlink: 'syz.3.2656': attribute type 1 has an invalid length.
[  338.635799][T16230] netlink: 'syz.4.2658': attribute type 1 has an invalid length.
[  338.637181][T16214] workqueue: Failed to create a rescuer kthread for wq "bond14": -EINTR
[  338.711073][ T6396] ip6_tunnel: ip6gretap0 xmit: Local address not yet configured!
[  338.713563][T16233] geneve1: left promiscuous mode
[  338.739193][T16239] netlink: 8 bytes leftover after parsing attributes in process `syz.4.2658'.
[  338.760233][T16233] syzkaller0: left promiscuous mode
[  338.779734][T16233] bond9: left promiscuous mode
[  338.839398][T16230] bond12: entered promiscuous mode
[  338.844945][T16230] 8021q: adding VLAN 0 to HW filter on device bond12
[  338.930482][ T6378] ip6_tunnel: ip6gretap0 xmit: Local address not yet configured!
[  339.276986][T16216] nci: __nci_request: wait_for_completion_interruptible_timeout failed -512
[  339.483409][T16284] tipc: Enabling of bearer <udp:s> rejected, already enabled
[  339.541444][T16284] geneve3: entered promiscuous mode
[  339.569124][ T6809] netdevsim netdevsim3 eth0: set [1, 0] type 2 family 0 port 6081 - 0
[  339.597682][ T6809] netdevsim netdevsim3 eth1: set [1, 0] type 2 family 0 port 6081 - 0
[  339.615481][T16284] netlink: 49 bytes leftover after parsing attributes in process `syz.3.2671'.
[  339.644647][ T6809] netdevsim netdevsim3 eth2: set [1, 0] type 2 family 0 port 6081 - 0
[  339.657360][ T6809] netdevsim netdevsim3 eth3: set [1, 0] type 2 family 0 port 6081 - 0
[  339.695822][T16295] netlink: 'syz.1.2674': attribute type 10 has an invalid length.
[  339.725166][T16295] veth0_vlan: left promiscuous mode
[  339.732565][T16295] veth0_vlan: entered promiscuous mode
[  339.764498][T16295] team0: Device veth0_vlan failed to register rx_handler
[  339.796560][T16307] sctp: [Deprecated]: syz.3.2677 (pid 16307) Use of struct sctp_assoc_value in delayed_ack socket option.
[  339.796560][T16307] Use struct sctp_sack_info instead
[  339.963517][T16316] syzkaller0: entered promiscuous mode
[  339.994957][T16316] tipc: Resetting bearer <eth:syzkaller0>
[  340.133610][T16326] vti0: entered promiscuous mode
[  340.315526][T16335] lo speed is unknown, defaulting to 1000
[  340.411812][T16343] netlink: 'syz.3.2686': attribute type 10 has an invalid length.
[  340.424477][T16343] team0: Port device geneve1 added
[  340.569777][T16301] nci: __nci_request: wait_for_completion_interruptible_timeout failed -512
[  340.764744][T16348] veth0_macvtap: Caught tx_queue_len zero misconfig
[  341.783658][T16414] netlink: 'syz.3.2705': attribute type 1 has an invalid length.
[  341.811263][T16414] __nla_validate_parse: 12 callbacks suppressed
[  341.811279][T16414] netlink: 224 bytes leftover after parsing attributes in process `syz.3.2705'.
[  341.928257][T16428] netlink: 20 bytes leftover after parsing attributes in process `syz.2.2709'.
[  341.996796][T16434] netlink: 48 bytes leftover after parsing attributes in process `syz.0.2712'.
[  342.035230][T16433] netlink: 20 bytes leftover after parsing attributes in process `syz.4.2710'.
[  342.149759][T16439] netlink: 12 bytes leftover after parsing attributes in process `syz.3.2714'.
[  342.176207][T16441] netlink: 12 bytes leftover after parsing attributes in process `syz.2.2715'.
[  342.209638][T16445] netlink: 12 bytes leftover after parsing attributes in process `syz.3.2714'.
[  342.263198][T16449] netlink: 4 bytes leftover after parsing attributes in process `syz.0.2717'.
[  342.308237][T16445] macvlan2: entered promiscuous mode
[  342.314203][T16445] macvlan2: entered allmulticast mode
[  342.322464][T16445] bond14: (slave macvlan2): Opening slave failed
[  342.347252][T16447] netlink: 292 bytes leftover after parsing attributes in process `syz.0.2717'.
[  342.359071][T16447] tunl0: Caught tx_queue_len zero misconfig
[  342.438042][   T48] netdevsim netdevsim0 netdevsim0: set [0, 0] type 1 family 0 port 8472 - 0
[  342.450916][T16449] netlink: 4 bytes leftover after parsing attributes in process `syz.0.2717'.
[  342.467485][   T48] netdevsim netdevsim0 netdevsim1: set [0, 0] type 1 family 0 port 8472 - 0
[  342.504302][   T48] netdevsim netdevsim0 netdevsim2: set [0, 0] type 1 family 0 port 8472 - 0
[  342.525791][T14178] netdevsim netdevsim0 netdevsim3: set [0, 0] type 1 family 0 port 8472 - 0
[  342.553416][T16451] lo speed is unknown, defaulting to 1000
[  343.362715][T16517] netlink: 'syz.1.2734': attribute type 15 has an invalid length.
[  343.379837][T16517] netlink: 'syz.1.2734': attribute type 25 has an invalid length.
[  343.652228][T16528] netlink: 'syz.1.2736': attribute type 1 has an invalid length.
[  343.662376][T16535] openvswitch: netlink: Flow actions may not be safe on all matching packets.
[  343.675121][T16528] netlink: 'syz.1.2736': attribute type 2 has an invalid length.
[  343.712255][T16528] netlink: 'syz.1.2736': attribute type 1 has an invalid length.
[  343.940007][T16543] 8021q: adding VLAN 0 to HW filter on device bond15
[  344.462906][ T4949] block nbd2: Receive control failed (result -32)
[  344.470244][ T5645] block nbd2: Receive control failed (result -32)
[  344.975221][T16605] 8021q: adding VLAN 0 to HW filter on device bond13
[  345.007411][T16610] gretap2: entered allmulticast mode
[  345.016954][T16610] bond13: (slave gretap2): Enslaving as an active interface with an up link
[  345.845479][T16605] bond13 (unregistering): (slave gretap2): Releasing backup interface
[  345.901252][T16605] bond13 (unregistering): Released all slaves
[  346.401664][T16645] veth1_to_batadv: entered promiscuous mode
[  346.470813][T16648] bond16: option tlb_dynamic_lb: mode dependency failed, not supported in mode balance-rr(0)
[  346.641645][T16648] bond16 (unregistering): Released all slaves
[  346.895843][T16666] __nla_validate_parse: 13 callbacks suppressed
[  346.895864][T16666] netlink: 8 bytes leftover after parsing attributes in process `syz.1.2775'.
[  346.921140][T16666] netlink: 'syz.1.2775': attribute type 30 has an invalid length.
[  346.948166][T16668] netlink: 8 bytes leftover after parsing attributes in process `syz.1.2775'.
[  346.960562][T16665] geneve3: entered promiscuous mode
[  346.999632][T16668] netlink: 'syz.1.2775': attribute type 30 has an invalid length.
[  347.015157][T16673] netlink: 36 bytes leftover after parsing attributes in process `syz.4.2778'.
[  347.054880][ T6809] netdevsim netdevsim0 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0
[  347.064060][ T6809] netdevsim netdevsim0 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0
[  347.194776][ T6809] netdevsim netdevsim0 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0
[  347.232839][ T6809] netdevsim netdevsim0 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0
[  347.251911][ T6378] lo speed is unknown, defaulting to 1000
[  347.254483][ T6809] netdevsim netdevsim1 netdevsim0: set [0, 0] type 1 family 0 port 8472 - 0
[  347.274675][ T6378] sy�2: Port: 1 Link ACTIVE
[  347.287889][ T6809] netdevsim netdevsim1 netdevsim1: set [0, 0] type 1 family 0 port 8472 - 0
[  347.442561][ T6809] netdevsim netdevsim1 netdevsim2: set [0, 0] type 1 family 0 port 8472 - 0
[  347.543941][T16684] syzkaller1: entered promiscuous mode
[  347.561908][T16684] syzkaller1: entered allmulticast mode
[  348.152980][T16711] xfrm1: entered allmulticast mode
[  348.342924][T16718] netlink: 136 bytes leftover after parsing attributes in process `syz.0.2791'.
[  348.684006][T16740] openvswitch: netlink: Flow actions may not be safe on all matching packets.
[  348.900053][T16749] netlink: 160 bytes leftover after parsing attributes in process `syz.3.2799'.
[  348.983728][T16745] netlink: 'syz.3.2799': attribute type 11 has an invalid length.
[  349.143574][T16749] netlink: 12 bytes leftover after parsing attributes in process `syz.3.2799'.
[  350.065002][T16786] bond10: (slave lo): Releasing backup interface
[  350.078127][T16786] bond10: (slave lo): last VLAN challenged slave left bond - VLAN blocking is removed
[  350.296704][T16790] sctp: [Deprecated]: syz.4.2810 (pid 16790) Use of int in max_burst socket option deprecated.
[  350.296704][T16790] Use struct sctp_assoc_value instead
[  350.704707][T16801] netlink: 12 bytes leftover after parsing attributes in process `syz.3.2813'.
[  350.832121][T16803] netlink: 28 bytes leftover after parsing attributes in process `syz.3.2813'.
[  350.845284][T16786] tipc: Resetting bearer <eth:syzkaller0>
[  350.901104][T16804] netlink: 12 bytes leftover after parsing attributes in process `syz.3.2813'.
[  351.026396][T16786] team0: Port device bond9 removed
[  351.231119][T16802] 8021q: adding VLAN 0 to HW filter on device bond18
[  351.240437][T16802] bond17: (slave bond18): Enslaving as an active interface with an up link
[  351.257782][T16803] 8021q: adding VLAN 0 to HW filter on device bond17
[  351.272785][T14174] netdevsim netdevsim1 netdevsim0: unset [0, 0] type 1 family 0 port 8472 - 0
[  351.295435][T14174] netdevsim netdevsim1 netdevsim1: unset [0, 0] type 1 family 0 port 8472 - 0
[  351.320878][ T6808] netdevsim netdevsim1 netdevsim2: unset [0, 0] type 1 family 0 port 8472 - 0
[  351.799143][T16835] netlink: 'syz.1.2822': attribute type 3 has an invalid length.
[  351.995212][T16844] netlink: 52 bytes leftover after parsing attributes in process `syz.0.2825'.
[  352.043405][T16844] netlink: 28 bytes leftover after parsing attributes in process `syz.0.2825'.
[  352.137619][T16850] mac80211_hwsim hwsim10 syzkaller0: entered promiscuous mode
[  352.158547][T16850] mac80211_hwsim hwsim10 syzkaller0: entered allmulticast mode
[  352.253304][T16854] netlink: 4 bytes leftover after parsing attributes in process `syz.0.2828'.
[  352.477158][T16865] syzkaller1: entered promiscuous mode
[  352.500936][T16865] syzkaller1: entered allmulticast mode
[  352.807194][T16871] veth0: entered promiscuous mode
[  352.859330][T16871] bond0: (slave ipvlan2): enslaved VLAN challenged slave. Adding VLANs will be blocked as long as it is part of bond.
[  352.975778][T16879] netlink: 'syz.4.2838': attribute type 1 has an invalid length.
[  352.979521][T16881] netlink: 'syz.4.2838': attribute type 1 has an invalid length.
[  352.984778][T16879] netlink: 'syz.4.2838': attribute type 4 has an invalid length.
[  353.005251][T16870] veth0: left promiscuous mode
[  353.026191][T16879] netlink: 9462 bytes leftover after parsing attributes in process `syz.4.2838'.
[  353.034492][T16881] netlink: 'syz.4.2838': attribute type 4 has an invalid length.
[  353.080974][T16881] netlink: 9462 bytes leftover after parsing attributes in process `syz.4.2838'.
[  353.392947][T16895] netlink: 'syz.4.2842': attribute type 13 has an invalid length.
[  353.447514][T16898] netlink: 100 bytes leftover after parsing attributes in process `syz.4.2842'.
[  353.507024][T16900] netlink: 'syz.0.2844': attribute type 11 has an invalid length.
[  353.602453][  T808] lo speed is unknown, defaulting to 1000
[  353.615316][  T808] sy�2: Port: 1 Link DOWN
[  354.067308][T16928] netlink: 8 bytes leftover after parsing attributes in process `syz.1.2847'.
[  354.109911][T16928] netlink: 8 bytes leftover after parsing attributes in process `syz.1.2847'.
[  354.167249][T16933] netlink: 260 bytes leftover after parsing attributes in process `syz.0.2852'.
[  354.174688][T16928] debugfs: '1��^!�Y������
[  354.174688][T16928] 3�UH�5r�Bn���\' already exists in 'ieee80211'
[  354.935272][T16967] netlink: 'syz.3.2861': attribute type 5 has an invalid length.
[  354.952381][T16962] netlink: 12 bytes leftover after parsing attributes in process `syz.0.2860'.
[  355.072855][T16963] bridge7: port 1(gretap0) entered blocking state
[  355.091469][T16963] bridge7: port 1(gretap0) entered disabled state
[  355.100058][T16963] gretap0: entered allmulticast mode
[  355.119476][T16963] gretap0: entered promiscuous mode
[  355.667162][T16992] syzkaller1: entered promiscuous mode
[  355.687967][T16992] syzkaller1: entered allmulticast mode
[  355.925901][ T5645] Bluetooth: hci5: unexpected cc 0x0c03 length: 249 > 1
[  355.939717][ T5645] Bluetooth: hci5: unexpected cc 0x1003 length: 249 > 9
[  355.951157][ T5645] Bluetooth: hci5: unexpected cc 0x1001 length: 249 > 9
[  355.960697][ T5645] Bluetooth: hci5: unexpected cc 0x0c23 length: 249 > 4
[  355.973908][ T5645] Bluetooth: hci5: unexpected cc 0x0c38 length: 249 > 2
[  356.782229][T16999] lo speed is unknown, defaulting to 1000
[  356.935767][T14174] netdevsim netdevsim0 netdevsim3 (unregistering): unset [0, 0] type 1 family 0 port 8472 - 0
[  356.970230][T14174] netdevsim netdevsim0 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[  357.045590][T17045] FAULT_INJECTION: forcing a failure.
[  357.045590][T17045] name failslab, interval 1, probability 0, space 0, times 1
[  357.061002][T17045] CPU: 0 UID: 0 PID: 17045 Comm: syz.4.2879 Not tainted syzkaller #0 PREEMPT(full) 
[  357.061044][T17045] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 04/18/2026
[  357.061055][T17045] Call Trace:
[  357.061090][T17045]  <TASK>
[  357.061186][T17045]  dump_stack_lvl+0xe8/0x150
[  357.061320][T17045]  should_fail_ex+0x412/0x560
[  357.061462][T17045]  should_failslab+0xa8/0x100
[  357.061508][T17045]  kmem_cache_alloc_node_noprof+0x8f/0x690
[  357.061549][T17045]  ? __alloc_skb+0x186/0x7d0
[  357.061638][T17045]  ? __alloc_skb+0x1d0/0x7d0
[  357.061652][T17045]  ? __local_bh_enable_ip+0xd0/0x130
[  357.061696][T17045]  __alloc_skb+0x1d0/0x7d0
[  357.061713][T17045]  ? netlink_ack_tlv_len+0x6c/0x210
[  357.061790][T17045]  netlink_ack+0x146/0xa50
[  357.061807][T17045]  ? __pfx_rtnetlink_rcv_msg+0x10/0x10
[  357.061856][T17045]  ? __lock_acquire+0x6b5/0x2cf0
[  357.061896][T17045]  netlink_rcv_skb+0x2b6/0x4b0
[  357.061916][T17045]  ? __pfx_rtnetlink_rcv_msg+0x10/0x10
[  357.061939][T17045]  ? __pfx_netlink_rcv_skb+0x10/0x10
[  357.061969][T17045]  ? netlink_deliver_tap+0x2e/0x1b0
[  357.061988][T17045]  ? netlink_deliver_tap+0x2e/0x1b0
[  357.062013][T17045]  netlink_unicast+0x75c/0x8e0
[  357.062040][T17045]  netlink_sendmsg+0x813/0xb40
[  357.062068][T17045]  ? __pfx_netlink_sendmsg+0x10/0x10
[  357.062091][T17045]  ? aa_sock_msg_perm+0xf1/0x1b0
[  357.062180][T17045]  ? bpf_lsm_socket_sendmsg+0x9/0x20
[  357.062223][T17045]  ____sys_sendmsg+0x972/0x9f0
[  357.062267][T17045]  ? __might_fault+0xaf/0x130
[  357.062295][T17045]  ? __pfx_____sys_sendmsg+0x10/0x10
[  357.062322][T17045]  ? import_iovec+0x73/0xa0
[  357.062397][T17045]  ___sys_sendmsg+0x2a5/0x360
[  357.062414][T17045]  ? __lock_acquire+0x6b5/0x2cf0
[  357.062434][T17045]  ? __pfx____sys_sendmsg+0x10/0x10
[  357.062485][T17045]  ? __fget_files+0x2a/0x420
[  357.062518][T17045]  ? __fget_files+0x3a0/0x420
[  357.062555][T17045]  __x64_sys_sendmsg+0x1bd/0x2a0
[  357.062578][T17045]  ? __pfx___x64_sys_sendmsg+0x10/0x10
[  357.062606][T17045]  ? __pfx_ksys_write+0x10/0x10
[  357.062643][T17045]  ? entry_SYSCALL_64_after_hwframe+0x77/0x7f
[  357.062676][T17045]  do_syscall_64+0x174/0x580
[  357.062774][T17045]  ? trace_irq_disable+0x3b/0x140
[  357.062809][T17045]  ? clear_bhb_loop+0x40/0x90
[  357.062835][T17045]  entry_SYSCALL_64_after_hwframe+0x77/0x7f
[  357.062852][T17045] RIP: 0033:0x7f17a719ce59
[  357.062899][T17045] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48
[  357.062940][T17045] RSP: 002b:00007f17a8009028 EFLAGS: 00000246 ORIG_RAX: 000000000000002e
[  357.062986][T17045] RAX: ffffffffffffffda RBX: 00007f17a7415fa0 RCX: 00007f17a719ce59
[  357.062998][T17045] RDX: 0000000020040084 RSI: 0000200000006040 RDI: 0000000000000003
[  357.063009][T17045] RBP: 00007f17a8009090 R08: 0000000000000000 R09: 0000000000000000
[  357.063020][T17045] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001
[  357.063030][T17045] R13: 00007f17a7416038 R14: 00007f17a7415fa0 R15: 00007ffe9cfc67a8
[  357.063059][T17045]  </TASK>
[  357.597688][T14174] netdevsim netdevsim0 netdevsim2 (unregistering): unset [0, 0] type 1 family 0 port 8472 - 0
[  357.609976][T14174] netdevsim netdevsim0 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[  357.823567][T17066] netlink: 14 bytes leftover after parsing attributes in process `syz.4.2887'.
[  357.850985][T14174] netdevsim netdevsim0 netdevsim1 (unregistering): unset [0, 0] type 1 family 0 port 8472 - 0
[  357.876337][T14174] netdevsim netdevsim0 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[  357.887847][   T30] audit: type=1804 audit(1780277077.620:6): pid=17072 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=invalid_pcr cause=open_writers comm="syz.4.2887" name="/newroot/571/cgroup.controllers" dev="tmpfs" ino=2943 res=1 errno=0
[  357.923399][   T30] audit: type=1800 audit(1780277077.620:7): pid=17072 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed(directio) comm="syz.4.2887" name="cgroup.controllers" dev="tmpfs" ino=2943 res=0 errno=0
[  357.946414][T17067] netlink: 40 bytes leftover after parsing attributes in process `syz.1.2888'.
[  358.015246][T14174] netdevsim netdevsim0 netdevsim0 (unregistering): unset [0, 0] type 1 family 0 port 8472 - 0
[  358.035852][ T5645] Bluetooth: hci5: command tx timeout
[  358.045944][T14174] netdevsim netdevsim0 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[  358.243003][T17087] netlink: 16 bytes leftover after parsing attributes in process `syz.3.2892'.
[  358.307034][T17087] netlink: 16 bytes leftover after parsing attributes in process `syz.3.2892'.
[  358.822707][T14174] gretap0: left allmulticast mode
[  358.828136][T14174] gretap0: left promiscuous mode
[  358.866720][T14174] bridge7: port 1(gretap0) entered disabled state
[  358.975991][T17124] netlink: 'syz.3.2900': attribute type 83 has an invalid length.
[  359.057642][T17130] netlink: 8 bytes leftover after parsing attributes in process `syz.2.2898'.
[  359.073729][T17131] netlink: 'syz.1.2899': attribute type 1 has an invalid length.
[  359.091836][T17128] FAULT_INJECTION: forcing a failure.
[  359.091836][T17128] name fail_usercopy, interval 1, probability 0, space 0, times 1
[  359.118495][T17128] CPU: 0 UID: 0 PID: 17128 Comm: syz.4.2901 Not tainted syzkaller #0 PREEMPT(full) 
[  359.118519][T17128] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 04/18/2026
[  359.118529][T17128] Call Trace:
[  359.118537][T17128]  <TASK>
[  359.118545][T17128]  dump_stack_lvl+0xe8/0x150
[  359.118575][T17128]  should_fail_ex+0x412/0x560
[  359.118598][T17128]  _copy_to_user+0x31/0xb0
[  359.118688][T17128]  simple_read_from_buffer+0xe1/0x170
[  359.118715][T17128]  proc_fail_nth_read+0x1bb/0x230
[  359.118762][T17128]  ? __pfx_proc_fail_nth_read+0x10/0x10
[  359.118789][T17128]  ? rw_verify_area+0x2a6/0x4d0
[  359.118812][T17128]  ? __pfx_proc_fail_nth_read+0x10/0x10
[  359.118836][T17128]  vfs_read+0x20c/0xa70
[  359.118865][T17128]  ? __pfx___mutex_lock+0x10/0x10
[  359.118916][T17128]  ? __pfx_vfs_read+0x10/0x10
[  359.118941][T17128]  ? __fget_files+0x2a/0x420
[  359.118966][T17128]  ? __fget_files+0x3a0/0x420
[  359.118986][T17128]  ? __fget_files+0x2a/0x420
[  359.119016][T17128]  ksys_read+0x150/0x270
[  359.119042][T17128]  ? __pfx_ksys_read+0x10/0x10
[  359.119074][T17128]  ? entry_SYSCALL_64_after_hwframe+0x77/0x7f
[  359.119094][T17128]  do_syscall_64+0x174/0x580
[  359.119111][T17128]  ? trace_irq_disable+0x3b/0x140
[  359.119136][T17128]  ? clear_bhb_loop+0x40/0x90
[  359.119157][T17128]  entry_SYSCALL_64_after_hwframe+0x77/0x7f
[  359.119175][T17128] RIP: 0033:0x7f17a715d68e
[  359.119192][T17128] Code: 08 0f 85 a5 a8 ff ff 49 89 fb 48 89 f0 48 89 d7 48 89 ce 4c 89 c2 4d 89 ca 4c 8b 44 24 08 4c 8b 4c 24 10 4c 89 5c 24 08 0f 05 <c3> 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 80 00 00 00 00 48 83 ec 08
[  359.119206][T17128] RSP: 002b:00007f17a8008fe8 EFLAGS: 00000246 ORIG_RAX: 0000000000000000
[  359.119225][T17128] RAX: ffffffffffffffda RBX: 00007f17a80096c0 RCX: 00007f17a715d68e
[  359.119237][T17128] RDX: 000000000000000f RSI: 00007f17a80090a0 RDI: 0000000000000005
[  359.119248][T17128] RBP: 00007f17a8009090 R08: 0000000000000000 R09: 0000000000000000
[  359.119259][T17128] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001
[  359.119270][T17128] R13: 00007f17a7416038 R14: 00007f17a7415fa0 R15: 00007ffe9cfc67a8
[  359.119300][T17128]  </TASK>
[  359.476706][T17141] netlink: 204 bytes leftover after parsing attributes in process `syz.3.2902'.
[  359.506457][T17141] netlink: 40 bytes leftover after parsing attributes in process `syz.3.2902'.
[  359.918705][T14174] bond4 (unregistering): (slave geneve2): Releasing active interface
[  359.984132][T14174] bond3 (unregistering): (slave bridge3): Releasing backup interface
[  359.998183][T14174] bridge3 (unregistering): left promiscuous mode
[  360.010385][T14174] bond5 (unregistering): (slave bridge4): Removing an active aggregator
[  360.020815][T14174] bond5 (unregistering): (slave bridge4): Releasing backup interface
[  360.029440][T14174] bond5 (unregistering): (slave bridge4): the permanent HWaddr of slave - de:82:06:ef:36:6c - is still in use by bond - set the HWaddr of slave to a different address to avoid conflicts
[  360.049440][T14174] bridge4 (unregistering): left promiscuous mode
[  360.056941][T14174] bridge4 (unregistering): left allmulticast mode
[  360.067708][T14174] bond5 (unregistering): (slave bridge5): Releasing backup interface
[  360.076433][T14174] bridge5 (unregistering): left promiscuous mode
[  360.082807][T14174] bridge5 (unregistering): left allmulticast mode
[  360.093491][T14174] bond0 (unregistering): (slave bridge6): Releasing backup interface
[  360.101656][T14174] bridge6 (unregistering): left promiscuous mode
[  360.107990][T14174] bridge6 (unregistering): left allmulticast mode
[  360.121476][ T5645] Bluetooth: hci5: command tx timeout
[  360.134939][T14174] 
 (unregistering): Released all slaves
[  360.154064][T14174] bond1 (unregistering): Released all slaves
[  360.166046][   T48] smbdirect: ib_dev[syz1] removed
[  360.178175][T14174] bond2 (unregistering): Released all slaves
[  360.210575][T14174] bond3 (unregistering): Released all slaves
[  360.225234][T14174] bond4 (unregistering): Released all slaves
[  360.241787][T14174] bond5 (unregistering): Released all slaves
[  360.263005][T14174] bond0 (unregistering): Released all slaves
[  360.277558][T14174] bond6 (unregistering): Released all slaves
[  360.297242][T14174] bond8 (unregistering): Released all slaves
[  360.311522][T14174] bond7 (unregistering): Released all slaves
[  360.332914][T17131] workqueue: Failed to create a rescuer kthread for wq "bond12": -EINTR
[  360.369094][ T5293] 8021q: adding VLAN 0 to HW filter on device eth1
[  360.640103][T17169] netlink: 'syz.2.2907': attribute type 1 has an invalid length.
[  360.678155][T14174] tipc: Disabling bearer <eth:batadv_slave_1>
[  360.679857][T17170] netlink: 8 bytes leftover after parsing attributes in process `syz.1.2908'.
[  360.702194][T17170] netlink: 1036 bytes leftover after parsing attributes in process `syz.1.2908'.
[  360.734337][T14174] tipc: Left network mode
[  360.853650][T17185] netlink: 36 bytes leftover after parsing attributes in process `syz.3.2910'.
[  360.893313][T17169] 8021q: adding VLAN 0 to HW filter on device bond12
[  360.970279][T17182] bond12 (unregistering): Released all slaves
[  361.590000][T17212] Bluetooth: hci0: Opcode 0x0c03 failed: -4
[  361.660309][T16999] bridge0: port 1(bridge_slave_0) entered blocking state
[  361.669312][T16999] bridge0: port 1(bridge_slave_0) entered disabled state
[  361.711848][T16999] bridge_slave_0: entered allmulticast mode
[  361.733685][T16999] bridge_slave_0: entered promiscuous mode
[  361.762362][ T5293] 8021q: adding VLAN 0 to HW filter on device eth2
[  361.801317][T16999] bridge0: port 2(bridge_slave_1) entered blocking state
[  361.822070][T16999] bridge0: port 2(bridge_slave_1) entered disabled state
[  361.835341][T16999] bridge_slave_1: entered allmulticast mode
[  361.837827][T17229] netlink: 'syz.1.2917': attribute type 2 has an invalid length.
[  361.843223][T16999] bridge_slave_1: entered promiscuous mode
[  361.899317][T17229] netlink: 'syz.1.2917': attribute type 1 has an invalid length.
[  361.970106][T17235] tipc: Enabling of bearer <udp:syz2> rejected, failed to enable media
[  361.994043][T16999] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link
[  362.012965][T16999] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link
[  362.181396][T17243] bond0: (slave syz_tun): Releasing backup interface
[  362.191148][ T5645] Bluetooth: hci5: command tx timeout
[  362.218126][T17243] A link change request failed with some changes committed already. Interface hsr_slave_0 may have been left with an inconsistent configuration, please check.
[  362.317809][T16999] team0: Port device team_slave_0 added
[  362.361524][T16999] team0: Port device team_slave_1 added
[  363.178491][T16999] batman_adv: batadv0: Adding interface: batadv_slave_0
[  363.186209][T16999] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem.
[  363.213193][T16999] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active
[  363.226938][T16999] batman_adv: batadv0: Adding interface: batadv_slave_1
[  363.234869][T16999] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem.
[  363.299231][T16999] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active
[  363.348067][ T5293] 8021q: adding VLAN 0 to HW filter on device eth3
[  363.365486][T17277] openvswitch: netlink: Key type 29 is not supported
[  363.480906][T17291] __nla_validate_parse: 4 callbacks suppressed
[  363.480954][T17291] netlink: 4 bytes leftover after parsing attributes in process `syz.4.2930'.
[  363.578240][T17292] netlink: 12 bytes leftover after parsing attributes in process `syz.4.2930'.
[  363.590873][T17297] netlink: 104 bytes leftover after parsing attributes in process `syz.3.2932'.
[  363.708305][T17291] netlink: 12 bytes leftover after parsing attributes in process `syz.4.2930'.
[  363.888219][T16999] hsr_slave_0: entered promiscuous mode
[  363.922875][T16999] hsr_slave_1: entered promiscuous mode
[  363.952481][T16999] debugfs: 'hsr0' already exists in 'hsr'
[  363.974853][T16999] Cannot create hsr debugfs directory
[  364.268717][ T5645] Bluetooth: hci5: command tx timeout
[  364.407680][T17331] sctp: [Deprecated]: syz.1.2938 (pid 17331) Use of struct sctp_assoc_value in delayed_ack socket option.
[  364.407680][T17331] Use struct sctp_sack_info instead
[  364.997872][ T5293] 8021q: adding VLAN 0 to HW filter on device eth4
[  365.098415][T17346] sctp: [Deprecated]: syz.1.2941 (pid 17346) Use of int in max_burst socket option deprecated.
[  365.098415][T17346] Use struct sctp_assoc_value instead
[  365.277960][T17351] netlink: 8 bytes leftover after parsing attributes in process `syz.3.2943'.
[  365.967146][T17349] pim6reg1: entered promiscuous mode
[  365.984819][T17349] pim6reg1: entered allmulticast mode
[  366.084110][T17357] netlink: 8 bytes leftover after parsing attributes in process `syz.3.2944'.
[  366.115277][T17357] netlink: 'syz.3.2944': attribute type 5 has an invalid length.
[  366.130801][T17357] netlink: 16 bytes leftover after parsing attributes in process `syz.3.2944'.
[  366.196366][T17362] netlink: 52 bytes leftover after parsing attributes in process `syz.1.2945'.
[  366.223696][T17362] netlink: 'syz.1.2945': attribute type 1 has an invalid length.
[  366.824866][T17373] dvmrp0: entered allmulticast mode
[  366.855597][T17368] lo speed is unknown, defaulting to 1000
[  366.860666][T17381] netlink: 'syz.3.2948': attribute type 10 has an invalid length.
[  366.879791][T17381] netlink: 228 bytes leftover after parsing attributes in process `syz.3.2948'.
[  367.096804][T14174] hsr_slave_0: left promiscuous mode
[  367.136048][T14174] hsr_slave_1: left promiscuous mode
[  367.202347][T14174] veth1_to_batadv: left promiscuous mode
[  367.979386][T17404] xt_hashlimit: size too large, truncated to 1048576
[  368.101833][T17408] netlink: 'syz.2.2951': attribute type 1 has an invalid length.
[  368.156544][T17408] netlink: 224 bytes leftover after parsing attributes in process `syz.2.2951'.
[  368.181940][ T6809] smbdirect: ib_dev[syz2] removed
[  368.233425][T17393] smbdirect: ib_dev[sy�2] removed
[  368.312358][T17406] bridge_slave_0 (unregistering): left allmulticast mode
[  368.335058][T17406] bridge_slave_0 (unregistering): left promiscuous mode
[  368.343252][T17406] bridge0: port 1(bridge_slave_0) entered disabled state
[  369.120779][T14174] IPVS: stop unused estimator thread 0...
[  369.202927][T16999] netdevsim netdevsim0 netdevsim0: renamed from eth0
[  369.266327][T16999] 8021q: adding VLAN 0 to HW filter on device netdevsim0
[  369.300910][T16999] netdevsim netdevsim0 netdevsim1: renamed from eth1
[  369.367027][T16999] 8021q: adding VLAN 0 to HW filter on device netdevsim1
[  369.389686][T16999] netdevsim netdevsim0 netdevsim2: renamed from eth2
[  369.443295][T16999] 8021q: adding VLAN 0 to HW filter on device netdevsim2
[  369.478390][T16999] netdevsim netdevsim0 netdevsim3: renamed from eth3
[  369.533910][T16999] 8021q: adding VLAN 0 to HW filter on device netdevsim3
[  369.636381][T17473] netlink: 'syz.1.2963': attribute type 1 has an invalid length.
[  369.936700][T16999] 8021q: adding VLAN 0 to HW filter on device bond0
[  370.006413][T16999] 8021q: adding VLAN 0 to HW filter on device team0
[  370.043952][ T6808] bridge0: port 1(bridge_slave_0) entered blocking state
[  370.051206][ T6808] bridge0: port 1(bridge_slave_0) entered forwarding state
[  370.093174][ T6808] bridge0: port 2(bridge_slave_1) entered blocking state
[  370.101843][ T6808] bridge0: port 2(bridge_slave_1) entered forwarding state
[  370.583687][T17518] netlink: 'syz.2.2971': attribute type 1 has an invalid length.
[  370.615130][T17518] netlink: 'syz.2.2971': attribute type 2 has an invalid length.
[  370.646427][T17518] netlink: 'syz.2.2971': attribute type 1 has an invalid length.
[  370.660825][T17518] netlink: 'syz.2.2971': attribute type 3 has an invalid length.
[  370.712149][T17518] netlink: 4 bytes leftover after parsing attributes in process `syz.2.2971'.
[  371.324842][T16999] 8021q: adding VLAN 0 to HW filter on device batadv0
[  371.420717][T17561] netlink: 'syz.3.2979': attribute type 1 has an invalid length.
[  371.522197][T17561] gretap1: entered allmulticast mode
[  371.538170][T17561] bond19: (slave gretap1): making interface the new active one
[  371.551597][T17561] bond19: (slave gretap1): Enslaving as an active interface with an up link
[  371.597067][T16999] veth0_vlan: entered promiscuous mode
[  371.643615][T16999] veth1_vlan: entered promiscuous mode
[  371.733865][T16999] veth0_macvtap: entered promiscuous mode
[  371.770749][T16999] veth1_macvtap: entered promiscuous mode
[  371.854787][T16999] batman_adv: batadv0: Interface activated: batadv_slave_0
[  371.912011][T17579] netlink: 12 bytes leftover after parsing attributes in process `syz.3.2982'.
[  371.964973][T16999] batman_adv: batadv0: Interface activated: batadv_slave_1
[  371.981480][T17586] openvswitch: netlink: Flow actions may not be safe on all matching packets.
[  371.993956][T17584] netlink: 20 bytes leftover after parsing attributes in process `syz.4.2983'.
[  372.098536][T17584] ��: entered promiscuous mode
[  372.107359][T17584] ��: entered allmulticast mode
[  372.146046][T14178] netdevsim netdevsim0 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0
[  372.171106][T14178] netdevsim netdevsim0 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0
[  372.193462][T14178] netdevsim netdevsim0 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0
[  372.212768][T14178] netdevsim netdevsim0 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0
[  372.234721][T17593] syzkaller1: entered promiscuous mode
[  372.244394][T17593] syzkaller1: entered allmulticast mode
[  372.431775][T17601] netlink: 12 bytes leftover after parsing attributes in process `syz.4.2987'.
[  372.551899][T17609] netlink: 8 bytes leftover after parsing attributes in process `syz.4.2987'.
[  372.635589][T17618] sock: sock_timestamping_bind_phc: sock not bind to device
[  372.775354][ T6809] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50
[  372.847692][ T6809] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50
[  372.922825][T17634] netlink: 100 bytes leftover after parsing attributes in process `syz.4.2993'.
[  372.975885][  T135] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50
[  372.993759][  T135] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50
[  373.040496][T17637] blkio.reset_stats is deprecated
[  373.166774][T17644] netlink: 48 bytes leftover after parsing attributes in process `syz.4.2997'.
[  373.277030][T17651] tipc: Enabled bearer <eth:syzkaller0>, priority 0
[  373.651499][T17665] netlink: 'syz.4.3001': attribute type 142 has an invalid length.
[  373.743641][ T4949] Bluetooth: hci2: unexpected cc 0x0c03 length: 249 > 1
[  373.757788][ T4949] Bluetooth: hci2: unexpected cc 0x1003 length: 249 > 9
[  373.770401][ T4949] Bluetooth: hci2: unexpected cc 0x1001 length: 249 > 9
[  373.786215][ T4949] Bluetooth: hci2: unexpected cc 0x0c23 length: 249 > 4
[  373.800977][ T4949] Bluetooth: hci2: unexpected cc 0x0c38 length: 249 > 2
[  374.030665][T17687] netlink: 5364 bytes leftover after parsing attributes in process `syz.1.3005'.
[  375.869567][ T5645] Bluetooth: hci2: command tx timeout
[  376.590486][T17787] tipc: Disabling bearer <eth:syzkaller0>
[  377.521706][T17675] bridge0: port 1(bridge_slave_0) entered blocking state
[  377.532792][T17675] bridge0: port 1(bridge_slave_0) entered disabled state
[  377.541653][T17675] bridge_slave_0: entered allmulticast mode
[  377.551844][T17675] bridge_slave_0: entered promiscuous mode
[  377.561209][T17675] bridge0: port 2(bridge_slave_1) entered blocking state
[  377.568491][T17675] bridge0: port 2(bridge_slave_1) entered disabled state
[  377.577089][T17675] bridge_slave_1: entered allmulticast mode
[  377.593526][T17675] bridge_slave_1: entered promiscuous mode
[  377.683303][T17675] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link
[  377.735896][T17675] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link
[  377.809438][T17675] team0: Port device team_slave_0 added
[  377.867109][T17675] team0: Port device team_slave_1 added
[  377.948775][ T5645] Bluetooth: hci2: command tx timeout
[  378.020663][T17675] batman_adv: batadv0: Adding interface: batadv_slave_0
[  378.027892][T17675] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem.
[  378.055908][T17675] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active
[  378.083588][T17675] batman_adv: batadv0: Adding interface: batadv_slave_1
[  378.090850][T17675] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem.
[  378.138387][T17675] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active
[  378.243516][T17675] hsr_slave_0: entered promiscuous mode
[  378.253719][T17675] hsr_slave_1: entered promiscuous mode
[  378.260338][T17675] debugfs: 'hsr0' already exists in 'hsr'
[  378.266301][T17675] Cannot create hsr debugfs directory
[  378.493429][T17675] netdevsim netdevsim3 eth3 (unregistering): unset [0, 0] type 1 family 0 port 8472 - 0
[  378.504665][T17675] netdevsim netdevsim3 eth3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[  378.585203][T17675] netdevsim netdevsim3 eth2 (unregistering): unset [0, 0] type 1 family 0 port 8472 - 0
[  378.595820][T17675] netdevsim netdevsim3 eth2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[  378.628792][T17675] netdevsim netdevsim3 eth1 (unregistering): unset [0, 0] type 1 family 0 port 8472 - 0
[  378.638869][T17675] netdevsim netdevsim3 eth1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[  378.669661][T17675] netdevsim netdevsim3 eth0 (unregistering): unset [0, 0] type 1 family 0 port 8472 - 0
[  378.689340][T17675] netdevsim netdevsim3 eth0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[  379.915543][T17808] nci: __nci_request: wait_for_completion_interruptible_timeout failed -512
[  379.953737][T17675] netdevsim netdevsim3 netdevsim0: renamed from eth0
[  379.997128][T17675] 8021q: adding VLAN 0 to HW filter on device netdevsim0
[  380.039719][T17675] netdevsim netdevsim3 netdevsim1: renamed from eth1
[  380.040634][ T5645] Bluetooth: hci2: command tx timeout
[  380.073512][T17675] 8021q: adding VLAN 0 to HW filter on device netdevsim1
[  380.098125][T17675] netdevsim netdevsim3 netdevsim2: renamed from eth2
[  380.148922][T17675] 8021q: adding VLAN 0 to HW filter on device netdevsim2
[  380.165869][T17675] netdevsim netdevsim3 netdevsim3: renamed from eth3
[  380.211406][T17675] 8021q: adding VLAN 0 to HW filter on device netdevsim3
[  380.366316][T17862] netlink: 36 bytes leftover after parsing attributes in process `syz.0.3036'.
[  380.600705][T17675] 8021q: adding VLAN 0 to HW filter on device bond0
[  380.692594][T17675] 8021q: adding VLAN 0 to HW filter on device team0
[  380.742353][T14174] bridge0: port 1(bridge_slave_0) entered blocking state
[  380.749576][T14174] bridge0: port 1(bridge_slave_0) entered forwarding state
[  380.807329][  T135] bridge0: port 2(bridge_slave_1) entered blocking state
[  380.814557][  T135] bridge0: port 2(bridge_slave_1) entered forwarding state
[  380.937691][T17886] netlink: 8 bytes leftover after parsing attributes in process `syz.0.3043'.
[  381.290138][T17895] tipc: Started in network mode
[  381.311802][T17895] tipc: Node identity 2e6c9e1b6da3, cluster identity 4711
[  381.319678][T17895] tipc: Enabled bearer <eth:syzkaller0>, priority 0
[  381.330892][T17895] syzkaller0: entered promiscuous mode
[  381.360352][T17895] syzkaller0: entered allmulticast mode
[  381.385329][T17904] netlink: 4 bytes leftover after parsing attributes in process `syz.4.3048'.
[  381.436633][T17904] syz_tun (unregistering): left allmulticast mode
[  381.672221][T17926] netlink: 'syz.1.3052': attribute type 1 has an invalid length.
[  381.697651][T17927] netlink: 'syz.1.3052': attribute type 1 has an invalid length.
[  381.780231][T17927] 8021q: adding VLAN 0 to HW filter on device bond12
[  381.791319][T17926] workqueue: Failed to create a rescuer kthread for wq "bond13": -EINTR
[  381.811756][T17931] veth0: entered promiscuous mode
[  381.964882][T17931] syzkaller0: entered promiscuous mode
[  381.981827][T17931] syzkaller0: entered allmulticast mode
[  382.004226][T17894] tipc: Resetting bearer <eth:syzkaller0>
[  382.044600][T17894] tipc: Disabling bearer <eth:syzkaller0>
[  382.110101][ T5645] Bluetooth: hci2: command tx timeout
[  382.254815][T17945] tipc: Resetting bearer <eth:syzkaller0>
[  382.331828][T17957] netlink: 'syz.0.3056': attribute type 10 has an invalid length.
[  382.353722][T17957] netlink: 40 bytes leftover after parsing attributes in process `syz.0.3056'.
[  382.452101][T17957] team0: Port device geneve1 added
[  382.480041][T17675] 8021q: adding VLAN 0 to HW filter on device batadv0
[  382.491833][T17962] netlink: 128 bytes leftover after parsing attributes in process `syz.1.3059'.
[  382.502205][T17931] veth0: left promiscuous mode
[  382.542761][T17962] netlink: 12 bytes leftover after parsing attributes in process `syz.1.3059'.
[  382.652907][T17972] IPVS: set_ctl: invalid protocol: 55420 2.199.89.101:26326
[  382.698421][T17972] IPVS: set_ctl: invalid protocol: 55420 2.199.89.101:26326
[  382.725402][T17675] veth0_vlan: entered promiscuous mode
[  382.772260][T17972] IPVS: set_ctl: invalid protocol: 55420 2.199.89.101:26326
[  382.789961][T17675] veth1_vlan: entered promiscuous mode
[  382.796396][T17972] IPVS: set_ctl: invalid protocol: 55420 2.199.89.101:26326
[  382.809375][T17972] IPVS: set_ctl: invalid protocol: 55420 2.199.89.101:26326
[  382.826089][T17972] IPVS: set_ctl: invalid protocol: 55420 2.199.89.101:26326
[  382.843468][T17972] IPVS: set_ctl: invalid protocol: 55420 2.199.89.101:26326
[  382.851536][T17972] IPVS: set_ctl: invalid protocol: 55420 2.199.89.101:26326
[  382.859945][T17972] IPVS: set_ctl: invalid protocol: 55420 2.199.89.101:26326
[  382.883155][T17972] IPVS: set_ctl: invalid protocol: 55420 2.199.89.101:26326
[  382.891013][T17972] IPVS: set_ctl: invalid protocol: 55420 2.199.89.101:26326
[  382.899977][T17972] IPVS: set_ctl: invalid protocol: 55420 2.199.89.101:26326
[  382.910526][T17972] IPVS: set_ctl: invalid protocol: 55420 2.199.89.101:26326
[  382.920253][T17972] IPVS: set_ctl: invalid protocol: 55420 2.199.89.101:26326
[  382.927770][T17972] IPVS: set_ctl: invalid protocol: 55420 2.199.89.101:26326
[  382.956384][T17972] IPVS: set_ctl: invalid protocol: 55420 2.199.89.101:26326
[  382.966925][T17675] veth0_macvtap: entered promiscuous mode
[  382.977066][T17972] IPVS: set_ctl: invalid protocol: 55420 2.199.89.101:26326
[  382.989487][T17675] veth1_macvtap: entered promiscuous mode
[  382.995382][T17972] IPVS: set_ctl: invalid protocol: 55420 2.199.89.101:26326
[  383.015123][T17972] IPVS: set_ctl: invalid protocol: 55420 2.199.89.101:26326
[  383.030862][T17675] batman_adv: batadv0: Interface activated: batadv_slave_0
[  383.038367][T17972] IPVS: set_ctl: invalid protocol: 55420 2.199.89.101:26326
[  383.052262][T17972] IPVS: set_ctl: invalid protocol: 55420 2.199.89.101:26326
[  383.068069][T17675] batman_adv: batadv0: Interface activated: batadv_slave_1
[  383.086521][T17972] IPVS: set_ctl: invalid protocol: 55420 2.199.89.101:26326
[  383.103915][T17972] IPVS: set_ctl: invalid protocol: 55420 2.199.89.101:26326
[  383.134644][  T135] netdevsim netdevsim3 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0
[  383.151734][T17972] IPVS: set_ctl: invalid protocol: 55420 2.199.89.101:26326
[  383.160983][T14174] netdevsim netdevsim3 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0
[  383.192522][T17972] IPVS: set_ctl: invalid protocol: 55420 2.199.89.101:26326
[  383.201758][T17972] IPVS: set_ctl: invalid protocol: 55420 2.199.89.101:26326
[  383.213804][T14174] netdevsim netdevsim3 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0
[  383.233953][T14174] netdevsim netdevsim3 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0
[  383.260180][T17972] IPVS: set_ctl: invalid protocol: 55420 2.199.89.101:26326
[  383.291798][T17972] IPVS: set_ctl: invalid protocol: 55420 2.199.89.101:26326
[  383.307155][T17972] IPVS: set_ctl: invalid protocol: 55420 2.199.89.101:26326
[  383.331246][T17972] IPVS: set_ctl: invalid protocol: 55420 2.199.89.101:26326
[  383.346543][T17972] IPVS: set_ctl: invalid protocol: 55420 2.199.89.101:26326
[  383.356407][T17972] IPVS: set_ctl: invalid protocol: 55420 2.199.89.101:26326
[  383.385092][T17972] IPVS: set_ctl: invalid protocol: 55420 2.199.89.101:26326
[  383.432582][T17972] IPVS: set_ctl: invalid protocol: 55420 2.199.89.101:26326
[  383.495342][  T135] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50
[  383.509907][  T135] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50
[  383.620159][ T6808] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50
[  383.653494][ T6808] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50
[  383.684623][ T6396] IPVS: starting estimator thread 0...
[  383.809152][T18012] IPVS: using max 30 ests per chain, 72000 per kthread
[  383.894647][T18018] netlink: 4 bytes leftover after parsing attributes in process `syz.3.2998'.
[  384.011362][T17972] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium
[  384.045732][T18026] netlink: 4 bytes leftover after parsing attributes in process `syz.4.3072'.
[  384.088123][T18018] netlink: 20 bytes leftover after parsing attributes in process `syz.3.2998'.
[  384.453264][ T4949] Bluetooth: hci3: unexpected cc 0x0c03 length: 249 > 1
[  384.464514][ T4949] Bluetooth: hci3: unexpected cc 0x1003 length: 249 > 9
[  384.476253][ T4949] Bluetooth: hci3: unexpected cc 0x1001 length: 249 > 9
[  384.485271][ T4949] Bluetooth: hci3: unexpected cc 0x0c23 length: 249 > 4
[  384.497154][ T4949] Bluetooth: hci3: unexpected cc 0x0c38 length: 249 > 2
[  384.571057][T18045] netlink: 8 bytes leftover after parsing attributes in process `syz.0.3077'.
[  385.110452][T18081] netlink: 'syz.0.3083': attribute type 1 has an invalid length.
[  385.532090][T18095] netlink: 'syz.1.3086': attribute type 6 has an invalid length.
[  386.231758][T18037] bridge0: port 1(bridge_slave_0) entered blocking state
[  386.241410][T18037] bridge0: port 1(bridge_slave_0) entered disabled state
[  386.250264][T18037] bridge_slave_0: entered allmulticast mode
[  386.258752][T18037] bridge_slave_0: entered promiscuous mode
[  386.299885][T18037] bridge0: port 2(bridge_slave_1) entered blocking state
[  386.307143][T18037] bridge0: port 2(bridge_slave_1) entered disabled state
[  386.321410][T18037] bridge_slave_1: entered allmulticast mode
[  386.339967][T18037] bridge_slave_1: entered promiscuous mode
[  386.421518][T18037] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link
[  386.578293][T18037] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link
[  386.589276][ T5645] Bluetooth: hci3: command tx timeout
[  386.832643][T18037] team0: Port device team_slave_0 added
[  386.842422][T18037] team0: Port device team_slave_1 added
[  386.866652][T18037] batman_adv: batadv0: Adding interface: batadv_slave_0
[  386.874107][T18037] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem.
[  386.901002][T18037] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active
[  386.915093][T18037] batman_adv: batadv0: Adding interface: batadv_slave_1
[  386.923658][T18037] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem.
[  386.950435][T18037] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active
[  387.145486][T18037] hsr_slave_0: entered promiscuous mode
[  387.164257][T18037] hsr_slave_1: entered promiscuous mode
[  387.178009][T18037] debugfs: 'hsr0' already exists in 'hsr'
[  387.185070][T18037] Cannot create hsr debugfs directory
[  387.377192][T18037] netdevsim netdevsim2 netdevsim3 (unregistering): unset [0, 0] type 1 family 0 port 8472 - 0
[  387.406190][T18037] netdevsim netdevsim2 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[  387.433172][T18122] __nla_validate_parse: 2 callbacks suppressed
[  387.433201][T18122] netlink: 12 bytes leftover after parsing attributes in process `syz.1.3090'.
[  387.484998][T18122] vlan3: entered promiscuous mode
[  387.495032][T18123] can: request_module (can-proto-3) failed.
[  387.501075][T18122] geneve1: entered promiscuous mode
[  387.506460][T18122] vlan3: entered allmulticast mode
[  387.512176][T18122] geneve1: entered allmulticast mode
[  387.612925][T18037] netdevsim netdevsim2 netdevsim2 (unregistering): unset [0, 0] type 1 family 0 port 8472 - 0
[  387.623790][T18037] netdevsim netdevsim2 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[  387.717723][T18037] netdevsim netdevsim2 netdevsim1 (unregistering): unset [0, 0] type 1 family 0 port 8472 - 0
[  387.731388][T18037] netdevsim netdevsim2 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[  387.808012][T18037] netdevsim netdevsim2 netdevsim0 (unregistering): unset [0, 0] type 1 family 0 port 8472 - 0
[  387.818502][T18037] netdevsim netdevsim2 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[  388.554926][T18101] nci: __nci_request: wait_for_completion_interruptible_timeout failed -512
[  388.596920][T18037] netdevsim netdevsim2 netdevsim0: renamed from eth0
[  388.641628][T18037] 8021q: adding VLAN 0 to HW filter on device netdevsim0
[  388.674917][ T5645] Bluetooth: hci3: command tx timeout
[  388.688774][T18037] netdevsim netdevsim2 netdevsim1: renamed from eth1
[  388.756043][T18037] 8021q: adding VLAN 0 to HW filter on device netdevsim1
[  388.777080][T18037] netdevsim netdevsim2 netdevsim2: renamed from eth2
[  388.793430][T18037] 8021q: adding VLAN 0 to HW filter on device netdevsim2
[  388.804589][T18141] netlink: 68 bytes leftover after parsing attributes in process `syz.0.3095'.
[  388.856504][T18137] hm�3)�: entered promiscuous mode
[  388.874624][T18037] netdevsim netdevsim2 netdevsim3: renamed from eth3
[  388.899342][T18146] netlink: 'syz.3.3096': attribute type 1 has an invalid length.
[  390.749074][ T5645] Bluetooth: hci3: command tx timeout
[  391.821629][T18037] 8021q: adding VLAN 0 to HW filter on device netdevsim3
[  391.846975][T18144] tc_dump_action: action bad kind
[  392.272087][T18183] netlink: 'syz.1.3101': attribute type 1 has an invalid length.
[  392.282582][T18187] netlink: 27 bytes leftover after parsing attributes in process `syz.3.3102'.
[  392.290593][T18183] netlink: 'syz.1.3101': attribute type 3 has an invalid length.
[  392.310330][T18183] netlink: 224 bytes leftover after parsing attributes in process `syz.1.3101'.
[  392.339249][T18037] 8021q: adding VLAN 0 to HW filter on device bond0
[  392.397170][T18037] 8021q: adding VLAN 0 to HW filter on device team0
[  392.442698][T14178] bridge0: port 1(bridge_slave_0) entered blocking state
[  392.449930][T14178] bridge0: port 1(bridge_slave_0) entered forwarding state
[  392.472488][T14178] bridge0: port 2(bridge_slave_1) entered blocking state
[  392.479718][T14178] bridge0: port 2(bridge_slave_1) entered forwarding state
[  392.785855][T18197] syzkaller0: entered promiscuous mode
[  392.797410][T18197] syzkaller0: entered allmulticast mode
[  392.829886][ T5645] Bluetooth: hci3: command tx timeout
[  393.275081][T18223] tipc: Invalid UDP bearer configuration
[  393.275148][T18223] tipc: Enabling of bearer <udp:s> rejected, failed to enable media
[  393.298312][T18228] netlink: 8 bytes leftover after parsing attributes in process `syz.3.3111'.
[  393.310075][T18228] netlink: 8 bytes leftover after parsing attributes in process `syz.3.3111'.
[  393.321144][T18228] netlink: 1 bytes leftover after parsing attributes in process `syz.3.3111'.
[  393.331344][T18216] netlink: 260 bytes leftover after parsing attributes in process `syz.0.3108'.
[  395.721632][T18258] pim6reg: left allmulticast mode
[  395.751096][T18257] netlink: 8 bytes leftover after parsing attributes in process `syz.3.3117'.
[  395.797146][T18264] netlink: 8 bytes leftover after parsing attributes in process `syz.0.3120'.
[  395.813057][T18264] netlink: 8 bytes leftover after parsing attributes in process `syz.0.3120'.
[  395.826440][T18037] 8021q: adding VLAN 0 to HW filter on device batadv0
[  395.974048][T18037] veth0_vlan: entered promiscuous mode
[  396.046142][T18037] veth1_vlan: entered promiscuous mode
[  396.106619][T18280] sctp: [Deprecated]: syz.1.3125 (pid 18280) Use of struct sctp_assoc_value in delayed_ack socket option.
[  396.106619][T18280] Use struct sctp_sack_info instead
[  396.142347][T18037] veth0_macvtap: entered promiscuous mode
[  396.188187][T18037] veth1_macvtap: entered promiscuous mode
[  396.321332][T18037] batman_adv: batadv0: Interface activated: batadv_slave_0
[  396.363338][T18037] batman_adv: batadv0: Interface activated: batadv_slave_1
[  396.403508][   T48] netdevsim netdevsim2 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0
[  396.425526][T18294] netlink: 8 bytes leftover after parsing attributes in process `syz.1.3131'.
[  396.436583][T18294] netlink: 'syz.1.3131': attribute type 1 has an invalid length.
[  396.447563][   T48] netdevsim netdevsim2 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0
[  396.485336][   T48] netdevsim netdevsim2 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0
[  396.506763][   T48] netdevsim netdevsim2 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0
[  396.685320][T18306] Bluetooth: MGMT ver 1.23
[  396.811804][ T6807] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50
[  396.855202][ T6807] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50
[  397.102459][ T6807] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50
[  397.116116][T18322] IPVS: sh: FWM 3 0x00000003 - no destination available
[  397.135195][ T6807] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50
[  397.642414][T18350] netlink: 'syz.3.3148': attribute type 75 has an invalid length.
[  397.662861][T18351] netlink: 120 bytes leftover after parsing attributes in process `syz.0.3146'.
[  397.705632][T18351] netlink: 120 bytes leftover after parsing attributes in process `syz.0.3146'.
[  397.811649][ T4949] Bluetooth: hci1: unexpected cc 0x0c03 length: 249 > 1
[  397.825446][ T4949] Bluetooth: hci1: unexpected cc 0x1003 length: 249 > 9
[  397.834680][ T4949] Bluetooth: hci1: unexpected cc 0x1001 length: 249 > 9
[  397.843469][ T4949] Bluetooth: hci1: unexpected cc 0x0c23 length: 249 > 4
[  397.860681][ T4949] Bluetooth: hci1: unexpected cc 0x0c38 length: 249 > 2
[  398.291440][T18376] netlink: 'syz.0.3153': attribute type 1 has an invalid length.
[  398.302800][T18376] __nla_validate_parse: 1 callbacks suppressed
[  398.302818][T18376] netlink: 4 bytes leftover after parsing attributes in process `syz.0.3153'.
[  398.319044][T18376] netlink: 'syz.0.3153': attribute type 1 has an invalid length.
[  398.337614][T18378] batman_adv: batadv0: Interface deactivated: batadv_slave_0
[  398.366441][T18378] batman_adv: batadv0: Removing interface: batadv_slave_0
[  398.596174][T18379] syzkaller1: entered promiscuous mode
[  398.603127][T18379] syzkaller1: entered allmulticast mode
[  399.200806][T18405] IPVS: set_ctl: invalid protocol: 0 0.0.0.0:0
[  399.234842][T18404] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium
[  399.865790][T18357] bridge0: port 1(bridge_slave_0) entered blocking state
[  399.884061][T18357] bridge0: port 1(bridge_slave_0) entered disabled state
[  399.899135][T18357] bridge_slave_0: entered allmulticast mode
[  399.906121][T18357] bridge_slave_0: entered promiscuous mode
[  399.915470][T18357] bridge0: port 2(bridge_slave_1) entered blocking state
[  399.922745][T18357] bridge0: port 2(bridge_slave_1) entered disabled state
[  399.931062][T18357] bridge_slave_1: entered allmulticast mode
[  399.938372][T18357] bridge_slave_1: entered promiscuous mode
[  399.949220][ T5645] Bluetooth: hci1: command tx timeout
[  399.972890][T18357] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link
[  399.985334][T18357] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link
[  400.011872][T18357] team0: Port device team_slave_0 added
[  400.021483][T18357] team0: Port device team_slave_1 added
[  400.044831][T18357] batman_adv: batadv0: Adding interface: batadv_slave_0
[  400.052194][T18357] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem.
[  400.078499][T18357] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active
[  400.093488][T18357] batman_adv: batadv0: Adding interface: batadv_slave_1
[  400.100609][T18357] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem.
[  400.127454][T18357] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active
[  400.166135][T18357] hsr_slave_0: entered promiscuous mode
[  400.172627][T18357] hsr_slave_1: entered promiscuous mode
[  400.180792][T18357] debugfs: 'hsr0' already exists in 'hsr'
[  400.186541][T18357] Cannot create hsr debugfs directory
[  400.282347][T18439] netlink: 96 bytes leftover after parsing attributes in process `syz.3.3171'.
[  400.488499][T18447] netlink: 'syz.1.3169': attribute type 9 has an invalid length.
[  400.508060][T18447] netlink: 'syz.1.3169': attribute type 6 has an invalid length.
[  400.512897][T18452] netlink: 8 bytes leftover after parsing attributes in process `syz.2.3170'.
[  400.527608][T18447] netlink: 'syz.1.3169': attribute type 7 has an invalid length.
[  400.535951][T18447] netlink: 'syz.1.3169': attribute type 8 has an invalid length.
[  401.249589][    C1] ------------[ cut here ]------------
[  401.256732][    C1] sk->sk_forward_alloc
[  401.256756][    C1] WARNING: net/ipv4/af_inet.c:162 at inet_sock_destruct+0x62d/0x740, CPU#1: syz.3.3172/18451
[  401.271231][    C1] Modules linked in:
[  401.275396][    C1] CPU: 1 UID: 0 PID: 18451 Comm: syz.3.3172 Not tainted syzkaller #0 PREEMPT(full) 
[  401.284834][    C1] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 04/18/2026
[  401.294948][    C1] RIP: 0010:inet_sock_destruct+0x62d/0x740
[  401.300826][    C1] Code: 0f 0b 90 e9 58 fe ff ff e8 20 a2 9f f7 90 0f 0b 90 e9 8b fe ff ff e8 12 a2 9f f7 90 0f 0b 90 e9 b1 fe ff ff e8 04 a2 9f f7 90 <0f> 0b 90 e9 d7 fe ff ff 89 f9 80 e1 07 80 c1 03 38 c1 0f 8c 95 fc
[  401.320514][    C1] RSP: 0018:ffffc90000a08d20 EFLAGS: 00010246
[  401.326602][    C1] RAX: ffffffff8a2615cc RBX: dffffc0000000000 RCX: ffff8880834bbe00
[  401.334656][    C1] RDX: 0000000000000100 RSI: 0000000000000090 RDI: 0000000000000000
[  401.342680][    C1] RBP: 0000000000000090 R08: ffff8880981013a7 R09: 1ffff11013020274
[  401.350703][    C1] R10: dffffc0000000000 R11: ffffed1013020275 R12: ffff888098101100
[  401.358721][    C1] R13: ffff888098101608 R14: ffff88809810138c R15: ffffffff8fea98c0
[  401.366791][    C1] FS:  00007fd5fb7d66c0(0000) GS:ffff88812538b000(0000) knlGS:0000000000000000
[  401.375768][    C1] CS:  0010 DS: 0000 ES: 0000 CR0: 0000000080050033
[  401.382397][    C1] CR2: 000000110c2c34ec CR3: 0000000020700000 CR4: 00000000003526f0
[  401.390424][    C1] Call Trace:
[  401.393715][    C1]  <IRQ>
[  401.396593][    C1]  ? __pfx_udp_destruct_sock+0x10/0x10
[  401.402133][    C1]  __sk_destruct+0x8d/0x9d0
[  401.406672][    C1]  ? rcu_core+0x751/0x1070
[  401.411185][    C1]  ? __pfx___sk_destruct+0x10/0x10
[  401.416316][    C1]  rcu_core+0x7cd/0x1070
[  401.420610][    C1]  ? __pfx_rcu_core+0x10/0x10
[  401.425289][    C1]  handle_softirqs+0x22a/0x840
[  401.430090][    C1]  ? __irq_exit_rcu+0xca/0x220
[  401.434970][    C1]  __irq_exit_rcu+0xca/0x220
[  401.439606][    C1]  irq_exit_rcu+0x9/0x30
[  401.443854][    C1]  sysvec_apic_timer_interrupt+0xa6/0xc0
[  401.449540][    C1]  </IRQ>
[  401.452480][    C1]  <TASK>
[  401.455415][    C1]  asm_sysvec_apic_timer_interrupt+0x1a/0x20
[  401.461445][    C1] RIP: 0010:_raw_spin_unlock_irq+0x29/0x50
[  401.467348][    C1] Code: 90 f3 0f 1e fa 53 48 89 fb 48 83 c7 18 48 8b 74 24 08 e8 ba 13 f6 f5 48 89 df e8 c2 88 f6 f5 e8 2d 23 22 f6 fb bf 01 00 00 00 <e8> f2 07 e8 f5 65 8b 05 bb 8d 8d 07 85 c0 74 07 5b c3 cc cc cc cc
[  401.487006][    C1] RSP: 0018:ffffc90004d77340 EFLAGS: 00000206
[  401.493127][    C1] RAX: 00000000000164b7 RBX: ffff88807a654560 RCX: 0000000080000002
[  401.501161][    C1] RDX: 0000000000000006 RSI: ffffffff8dfad876 RDI: 0000000000000001
[  401.509195][    C1] RBP: 1ffff1100f4ca8ab R08: ffffffff903084f7 R09: 1ffffffff206109e
[  401.517181][    C1] R10: dffffc0000000000 R11: fffffbfff206109f R12: ffff88807a654560
[  401.525207][    C1] R13: dffffc0000000000 R14: 00fff20000020021 R15: ffff88807a654558
[  401.533258][    C1]  filemap_remove_folio+0x102/0x3a0
[  401.538520][    C1]  truncate_inode_folio+0x5d/0x70
[  401.543627][    C1]  shmem_undo_range+0x42f/0x1660
[  401.548644][    C1]  ? __pfx_shmem_undo_range+0x10/0x10
[  401.554068][    C1]  ? __pfx_filemap_get_entry+0x10/0x10
[  401.559634][    C1]  ? folio_unlock+0x101/0x160
[  401.564343][    C1]  shmem_fallocate+0xdb8/0xec0
[  401.569192][    C1]  ? __pfx_shmem_fallocate+0x10/0x10
[  401.574502][    C1]  ? vfs_fallocate+0x5f0/0x7e0
[  401.579331][    C1]  vfs_fallocate+0x669/0x7e0
[  401.583942][    C1]  ? __pfx_vfs_fallocate+0x10/0x10
[  401.589118][    C1]  file_ioctl+0x5bf/0x860
[  401.593468][    C1]  ? __pfx_file_ioctl+0x10/0x10
[  401.598347][    C1]  ? kasan_quarantine_put+0xbb/0x1f0
[  401.603718][    C1]  ? tomoyo_path_number_perm+0x219/0x630
[  401.609526][    C1]  ? tomoyo_path_number_perm+0x219/0x630
[  401.615190][    C1]  do_vfs_ioctl+0xc26/0x1530
[  401.619847][    C1]  ? __pfx_do_vfs_ioctl+0x10/0x10
[  401.624908][    C1]  ? do_futex+0x395/0x420
[  401.629375][    C1]  ? __fget_files+0x2a/0x420
[  401.633986][    C1]  ? __fget_files+0x2a/0x420
[  401.638646][    C1]  ? __fget_files+0x3a0/0x420
[  401.642482][T18480] netlink: 12 bytes leftover after parsing attributes in process `syz.0.3175'.
[  401.643330][    C1]  ? __fget_files+0x2a/0x420
[  401.656898][    C1]  ? bpf_lsm_file_ioctl+0x9/0x20
[  401.661904][    C1]  __se_sys_ioctl+0x82/0x170
[  401.666518][    C1]  ? entry_SYSCALL_64_after_hwframe+0x77/0x7f
[  401.672647][    C1]  do_syscall_64+0x174/0x580
[  401.677255][    C1]  ? trace_irq_disable+0x3b/0x140
[  401.682350][    C1]  ? clear_bhb_loop+0x40/0x90
[  401.687048][    C1]  entry_SYSCALL_64_after_hwframe+0x77/0x7f
[  401.692995][    C1] RIP: 0033:0x7fd5fa99ce59
[  401.697425][    C1] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48
[  401.717088][    C1] RSP: 002b:00007fd5fb7d6028 EFLAGS: 00000246 ORIG_RAX: 0000000000000010
[  401.725560][    C1] RAX: ffffffffffffffda RBX: 00007fd5fac15fa0 RCX: 00007fd5fa99ce59
[  401.733604][    C1] RDX: 0000200000000180 RSI: 0000000040305828 RDI: 0000000000000004
[  401.741628][    C1] RBP: 00007fd5faa32d6f R08: 0000000000000000 R09: 0000000000000000
[  401.749695][    C1] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000
[  401.757677][    C1] R13: 00007fd5fac16038 R14: 00007fd5fac15fa0 R15: 00007ffe8a40f7d8
[  401.765739][    C1]  </TASK>
[  401.768818][    C1] Kernel panic - not syncing: kernel: panic_on_warn set ...
[  401.776109][    C1] CPU: 1 UID: 0 PID: 18451 Comm: syz.3.3172 Not tainted syzkaller #0 PREEMPT(full) 
[  401.785479][    C1] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 04/18/2026
[  401.795525][    C1] Call Trace:
[  401.798796][    C1]  <IRQ>
[  401.801639][    C1]  vpanic+0x56c/0xa60
[  401.805656][    C1]  ? __pfx__printk+0x10/0x10
[  401.810242][    C1]  ? __pfx_vpanic+0x10/0x10
[  401.814734][    C1]  ? is_bpf_text_address+0x292/0x2b0
[  401.820029][    C1]  ? is_bpf_text_address+0x26/0x2b0
[  401.825222][    C1]  panic+0xc5/0xd0
[  401.828935][    C1]  ? __pfx_panic+0x10/0x10
[  401.833364][    C1]  __warn+0x315/0x4c0
[  401.837341][    C1]  ? inet_sock_destruct+0x62d/0x740
[  401.842536][    C1]  ? inet_sock_destruct+0x62d/0x740
[  401.847733][    C1]  __report_bug+0x29a/0x540
[  401.852315][    C1]  ? kasan_save_track+0x3e/0x80
[  401.857159][    C1]  ? kasan_save_free_info+0x46/0x50
[  401.862354][    C1]  ? __kasan_slab_free+0x5c/0x80
[  401.867291][    C1]  ? inet_sock_destruct+0x62d/0x740
[  401.872481][    C1]  ? __pfx___report_bug+0x10/0x10
[  401.877488][    C1]  ? shmem_undo_range+0x42f/0x1660
[  401.882588][    C1]  ? shmem_fallocate+0xdb8/0xec0
[  401.887526][    C1]  ? vfs_fallocate+0x669/0x7e0
[  401.892279][    C1]  ? file_ioctl+0x5bf/0x860
[  401.896768][    C1]  ? do_vfs_ioctl+0xc26/0x1530
[  401.901517][    C1]  ? __se_sys_ioctl+0x82/0x170
[  401.906277][    C1]  ? do_syscall_64+0x174/0x580
[  401.911030][    C1]  ? entry_SYSCALL_64_after_hwframe+0x77/0x7f
[  401.917094][    C1]  ? inet_sock_destruct+0x62d/0x740
[  401.922287][    C1]  report_bug+0x16a/0x220
[  401.926609][    C1]  ? inet_sock_destruct+0x62d/0x740
[  401.931811][    C1]  ? inet_sock_destruct+0x62f/0x740
[  401.937010][    C1]  handle_bug+0x9c/0x200
[  401.941249][    C1]  exc_invalid_op+0x1a/0x50
[  401.945744][    C1]  asm_exc_invalid_op+0x1a/0x20
[  401.950585][    C1] RIP: 0010:inet_sock_destruct+0x62d/0x740
[  401.956407][    C1] Code: 0f 0b 90 e9 58 fe ff ff e8 20 a2 9f f7 90 0f 0b 90 e9 8b fe ff ff e8 12 a2 9f f7 90 0f 0b 90 e9 b1 fe ff ff e8 04 a2 9f f7 90 <0f> 0b 90 e9 d7 fe ff ff 89 f9 80 e1 07 80 c1 03 38 c1 0f 8c 95 fc
[  401.976002][    C1] RSP: 0018:ffffc90000a08d20 EFLAGS: 00010246
[  401.982063][    C1] RAX: ffffffff8a2615cc RBX: dffffc0000000000 RCX: ffff8880834bbe00
[  401.990026][    C1] RDX: 0000000000000100 RSI: 0000000000000090 RDI: 0000000000000000
[  401.997988][    C1] RBP: 0000000000000090 R08: ffff8880981013a7 R09: 1ffff11013020274
[  402.005948][    C1] R10: dffffc0000000000 R11: ffffed1013020275 R12: ffff888098101100
[  402.013914][    C1] R13: ffff888098101608 R14: ffff88809810138c R15: ffffffff8fea98c0
[  402.021894][    C1]  ? inet_sock_destruct+0x62c/0x740
[  402.027118][    C1]  ? __pfx_udp_destruct_sock+0x10/0x10
[  402.032595][    C1]  __sk_destruct+0x8d/0x9d0
[  402.037109][    C1]  ? rcu_core+0x751/0x1070
[  402.041518][    C1]  ? __pfx___sk_destruct+0x10/0x10
[  402.046627][    C1]  rcu_core+0x7cd/0x1070
[  402.050878][    C1]  ? __pfx_rcu_core+0x10/0x10
[  402.055561][    C1]  handle_softirqs+0x22a/0x840
[  402.060326][    C1]  ? __irq_exit_rcu+0xca/0x220
[  402.065100][    C1]  __irq_exit_rcu+0xca/0x220
[  402.069685][    C1]  irq_exit_rcu+0x9/0x30
[  402.073915][    C1]  sysvec_apic_timer_interrupt+0xa6/0xc0
[  402.079540][    C1]  </IRQ>
[  402.082458][    C1]  <TASK>
[  402.085377][    C1]  asm_sysvec_apic_timer_interrupt+0x1a/0x20
[  402.091348][    C1] RIP: 0010:_raw_spin_unlock_irq+0x29/0x50
[  402.097153][    C1] Code: 90 f3 0f 1e fa 53 48 89 fb 48 83 c7 18 48 8b 74 24 08 e8 ba 13 f6 f5 48 89 df e8 c2 88 f6 f5 e8 2d 23 22 f6 fb bf 01 00 00 00 <e8> f2 07 e8 f5 65 8b 05 bb 8d 8d 07 85 c0 74 07 5b c3 cc cc cc cc
[  402.116749][    C1] RSP: 0018:ffffc90004d77340 EFLAGS: 00000206
[  402.122810][    C1] RAX: 00000000000164b7 RBX: ffff88807a654560 RCX: 0000000080000002
[  402.130768][    C1] RDX: 0000000000000006 RSI: ffffffff8dfad876 RDI: 0000000000000001
[  402.138730][    C1] RBP: 1ffff1100f4ca8ab R08: ffffffff903084f7 R09: 1ffffffff206109e
[  402.146695][    C1] R10: dffffc0000000000 R11: fffffbfff206109f R12: ffff88807a654560
[  402.154684][    C1] R13: dffffc0000000000 R14: 00fff20000020021 R15: ffff88807a654558
[  402.162662][    C1]  filemap_remove_folio+0x102/0x3a0
[  402.167873][    C1]  truncate_inode_folio+0x5d/0x70
[  402.172903][    C1]  shmem_undo_range+0x42f/0x1660
[  402.177842][    C1]  ? __pfx_shmem_undo_range+0x10/0x10
[  402.183223][    C1]  ? __pfx_filemap_get_entry+0x10/0x10
[  402.188704][    C1]  ? folio_unlock+0x101/0x160
[  402.193374][    C1]  shmem_fallocate+0xdb8/0xec0
[  402.198144][    C1]  ? __pfx_shmem_fallocate+0x10/0x10
[  402.203426][    C1]  ? vfs_fallocate+0x5f0/0x7e0
[  402.208194][    C1]  vfs_fallocate+0x669/0x7e0
[  402.212775][    C1]  ? __pfx_vfs_fallocate+0x10/0x10
[  402.217885][    C1]  file_ioctl+0x5bf/0x860
[  402.222207][    C1]  ? __pfx_file_ioctl+0x10/0x10
[  402.227055][    C1]  ? kasan_quarantine_put+0xbb/0x1f0
[  402.232372][    C1]  ? tomoyo_path_number_perm+0x219/0x630
[  402.237998][    C1]  ? tomoyo_path_number_perm+0x219/0x630
[  402.243623][    C1]  do_vfs_ioctl+0xc26/0x1530
[  402.248205][    C1]  ? __pfx_do_vfs_ioctl+0x10/0x10
[  402.253223][    C1]  ? do_futex+0x395/0x420
[  402.257560][    C1]  ? __fget_files+0x2a/0x420
[  402.262143][    C1]  ? __fget_files+0x2a/0x420
[  402.266728][    C1]  ? __fget_files+0x3a0/0x420
[  402.271398][    C1]  ? __fget_files+0x2a/0x420
[  402.275986][    C1]  ? bpf_lsm_file_ioctl+0x9/0x20
[  402.280926][    C1]  __se_sys_ioctl+0x82/0x170
[  402.285522][    C1]  ? entry_SYSCALL_64_after_hwframe+0x77/0x7f
[  402.291583][    C1]  do_syscall_64+0x174/0x580
[  402.296167][    C1]  ? trace_irq_disable+0x3b/0x140
[  402.301188][    C1]  ? clear_bhb_loop+0x40/0x90
[  402.305857][    C1]  entry_SYSCALL_64_after_hwframe+0x77/0x7f
[  402.311738][    C1] RIP: 0033:0x7fd5fa99ce59
[  402.316144][    C1] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48
[  402.335737][    C1] RSP: 002b:00007fd5fb7d6028 EFLAGS: 00000246 ORIG_RAX: 0000000000000010
[  402.344154][    C1] RAX: ffffffffffffffda RBX: 00007fd5fac15fa0 RCX: 00007fd5fa99ce59
[  402.352136][    C1] RDX: 0000200000000180 RSI: 0000000040305828 RDI: 0000000000000004
[  402.360106][    C1] RBP: 00007fd5faa32d6f R08: 0000000000000000 R09: 0000000000000000
[  402.368073][    C1] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000
[  402.376043][    C1] R13: 00007fd5fac16038 R14: 00007fd5fac15fa0 R15: 00007ffe8a40f7d8
[  402.384045][    C1]  </TASK>
[  402.387598][    C1] Kernel Offset: disabled
[  402.391915][    C1] Rebooting in 86400 seconds..