last executing test programs:

3.693350455s ago: executing program 0 (id=3649):
r0 = socket$kcm(0x10, 0x2, 0x0)
r1 = socket$nl_route(0x10, 0x3, 0x0)
sendmsg$nl_route(r1, &(0x7f0000000100)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000180)=@ipv6_newnexthop={0x2c, 0x68, 0x5fb9a818fb7378e9, 0x0, 0x4, {}, [@NHA_GATEWAY={0x14, 0x6, @ip4=@broadcast}]}, 0x2c}}, 0x0)
r2 = socket(0x1e, 0x1, 0x0)
setsockopt$TIPC_IMPORTANCE(r2, 0x10f, 0x8a, &(0x7f0000000040)=0x7e, 0x4)
r3 = socket$kcm(0x10, 0x2, 0x0)
sendmsg$inet(r3, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000000)=[{&(0x7f0000000080)="5c00000013006bec9e3be35c6e17aa31076b876c0d000000ba090000160af3653c001ac00400020208000500030001002c000000eab556a705251e618294ff0051f60a84c9f4d4938037e786a6d0000300000000000000ffffc6c953", 0x5c}], 0x1, 0x0, 0x0, 0x1f00c00e}, 0x4a046)
sendmsg$inet(r0, &(0x7f0000000080)={0x0, 0xd0f, &(0x7f0000000000)=[{&(0x7f00000006c0)="5c00000013006bcd9e3fe3dc6e48aa310b6b8703100000001f03000000020000040014000d000a000d0000009ee517d34460bc24eab556a705251e6182949a3651f60a84c9f5d1938037e786a6d0bdd7fcf50e4509c5bb5a00f69853", 0x5c}], 0x1, 0x0, 0x0, 0x1f00c00e}, 0x40000)
setsockopt$MRT_DEL_MFC(0xffffffffffffffff, 0x0, 0xcd, &(0x7f0000000040)={@broadcast, @multicast2, 0x0, "9b4dd8d2604ae42350faa5d264ee1200bb615b1ecb4a160d6f6a751aba55d85f", 0x4a, 0x2, 0x3, 0x9}, 0x3c)

3.210740235s ago: executing program 3 (id=3657):
r0 = syz_init_net_socket$bt_l2cap(0x1f, 0x5, 0x0)
ioctl$sock_SIOCOUTQ(r0, 0x5411, &(0x7f0000000200))
r1 = socket$inet6(0xa, 0x800, 0x1)
r2 = socket(0x10, 0x803, 0x0)
r3 = socket$nl_generic(0x10, 0x3, 0x10)
socket(0x2d, 0x80000, 0x0)
syz_genetlink_get_family_id$ethtool(&(0x7f0000000180), r3)
getsockname$packet(r2, &(0x7f0000000440)={0x11, 0x0, <r4=>0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f00000000c0)=0x14)
sendmsg$nl_route(r2, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000240)=ANY=[@ANYBLOB="4800000010003704feffffffffdbdf2500000000", @ANYRES32=r4, @ANYBLOB="c30407001b14bf26280012800b000100697036746e6c00001800028014000200fc01000000000000b16917a000000000"], 0x48}, 0x1, 0x0, 0x0, 0xa3786d37e20239b}, 0x1000c014)
r5 = socket$kcm(0x2, 0x3, 0x2)
ioctl$SIOCSIFHWADDR(r5, 0x8916, &(0x7f0000000040)={'wlan1\x00', @random="0200ac7f7f00"})
r6 = openat$tun(0xffffffffffffff9c, &(0x7f00000001c0), 0xa2f01, 0x0)
ioctl$TUNSETIFF(r6, 0x400454ca, &(0x7f00000000c0)={'syzkaller1\x00', 0x6bf1c2d5adba8c32})
r7 = socket$inet6(0xa, 0x2, 0x0)
bind$inet6(r7, &(0x7f0000000100)={0xa, 0x4e20, 0x8000, @ipv4={'\x00', '\xff\xff', @empty}}, 0x1c)
r8 = socket$kcm(0x2, 0xa, 0x2)
ioctl$SIOCSIFHWADDR(r8, 0x8914, &(0x7f0000000180)={'syzkaller1\x00', @link_local})
write$tun(r6, &(0x7f00000006c0)=ANY=[@ANYBLOB="0a00001bbbbbbbbbbbbbaaaaaaaaaa2986dd6d002008001811ff20010000000000000000000000000001ff0200000000000000000000000000014f194e20"], 0x52)
getsockopt$IP_SET_OP_GET_BYNAME(r2, 0x1, 0x53, &(0x7f0000000100)={0x6, 0x7, 'syz0\x00'}, &(0x7f00000001c0)=0x28)
bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000400)={0x6, 0x4, &(0x7f0000000080)=ANY=[@ANYBLOB="18f1ffffffffffffff00000000004800bf00010001000f00000017f985000000"], &(0x7f0000001480)='syzkaller\x00', 0x9}, 0x94)
r9 = socket$rxrpc(0x21, 0x2, 0x2)
bind$rxrpc(r2, &(0x7f00000002c0)=@in4={0x21, 0x2, 0x2, 0x10, {0x2, 0x4e21, @multicast1}}, 0x24)
ioctl$FS_IOC_GETFSUUID(r9, 0x80111500, 0x0)
sendmmsg$inet(r1, &(0x7f00000018c0)=[{{&(0x7f0000000040)={0x2, 0x4e1c, @multicast1}, 0x10, 0x0, 0x0, &(0x7f0000000080)=[@ip_pktinfo={{0x1c, 0x0, 0x8, {r4, @empty, @multicast1}}}], 0x20}}], 0x1, 0x4880)

3.141637987s ago: executing program 0 (id=3658):
r0 = socket$nl_route(0x10, 0x3, 0x0)
sendmsg$nl_route_sched(r0, &(0x7f0000002f80)={0x0, 0x0, &(0x7f0000002f40)={&(0x7f0000000600)=@newtaction={0x48, 0x30, 0x1, 0x0, 0x0, {}, [{0x34, 0x1, [@m_skbedit={0x30, 0x21, 0x0, 0x0, {{0xc}, {0x4}, {0x4}, {0xc}, {0xc}}}]}]}, 0x48}}, 0x4000)
r1 = socket$inet(0xa, 0x801, 0x84)
connect$inet(r1, &(0x7f0000004cc0)={0x2, 0x0, @remote={0xac, 0x14, 0xffffffffffffffff}}, 0x10)
ioctl$XFS_IOC_ATTRMULTI_BY_HANDLE(r1, 0x4048587b, &(0x7f0000000400)={{<r2=>r0, &(0x7f0000000000)='skbedit\x00', 0x600840, &(0x7f00000000c0)={@align=0x7, {0x100, 0xfff3, 0x2b581a45, 0xe9733ed}}, 0xfffff724, &(0x7f0000000100), &(0x7f0000000140)=0x7}, 0x2, &(0x7f00000003c0)=[{0x0, 0x820, &(0x7f0000000180)='*#.-*\\&\x00', &(0x7f00000001c0)="0a891012fc7680b28bc735675727fe47b7fcff8d28c1150ccab5f0e715674f295a0c0dcf8c58115e6f966ab6c51b9624a2d16e1c36835ce11e4fd8780ff43ca4265919400ea41d682b08bf10e471a3665eeee95068c438ea198bf7ce7311df21813cff43067576642cda3f8f60a759a93bf5517e0c78c2b2b0868a557d8347c3dcdafff9", 0x84, 0x2}, {0x3, 0x51, &(0x7f0000000280)='@\t/\x00', &(0x7f00000002c0)="6fa4ad1673518de79a724369da1916b4927a5dde61865f3e0ac19e0e6bb7e3ada23c480786bda7c6195ac78ffa08a964eabef40be88da4383e9b3e1ff8baa5d274168671de43babbfb92c4733960ab435a8d1c3eca3e3c256daaf0eec433404e165dec08dbfdb68a268b85ffdd0b394d1d69bc9e58a0268a29e4d1fcff6de28885ece67476bc6523483692bb04870c15aedfd439dd0dcf417bea07b2bd9b3fe084685bdec6f4d9e8f6d8aa36165ec9b445935f59316f091f0a71af8671c2060e8e5ee8d0a31c21d317486443816100270aa49be7c151120eb5176318", 0xdc, 0x20}]})
setsockopt$inet_tcp_TCP_CONGESTION(r2, 0x6, 0xd, &(0x7f0000000480)='illinois', 0x8)
listen(r1, 0x5)
r3 = accept4(r1, 0x0, 0x0, 0x0)
getsockopt$inet_sctp_SCTP_ASSOCINFO(r3, 0x84, 0x1, &(0x7f0000000040)={0x0, 0xb, 0x8, 0xfff, 0xfffffffa, 0x6}, &(0x7f0000000080)=0x14)
syz_80211_inject_frame(&(0x7f0000000600)=@broadcast, &(0x7f00000010c0)=ANY=[@ANYBLOB="08ba060008daf52cc203475c6402110000009ad0f442809500000000008f4c313800478064f527e49cf20875b147a4dad9824e28"], 0x1c)
r4 = socket(0x400000000010, 0x3, 0x0)
ioctl$sock_SIOCGIFINDEX(r4, 0x8933, &(0x7f0000000380)={'syzkaller0\x00', <r5=>0x0})
sendmsg$nl_route_sched(r4, &(0x7f00000012c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000001000)=@newqdisc={0xb0, 0x24, 0x4ee4e6a52ff56541, 0x70bd2a, 0xffffffff, {0x0, 0x0, 0x0, r5, {0x0, 0x7}, {0xffff, 0xffff}}, [@qdisc_kind_options=@q_cake={{0x9}, {0xc, 0x2, [@TCA_CAKE_AUTORATE={0x8}]}}, @TCA_STAB={0x5c, 0x8, 0x0, 0x1, [{{0x1c, 0x1, {0x40, 0x2, 0x5, 0x5, 0x2, 0x8, 0x1, 0x3}}, {0xa, 0x2, [0xd3ae, 0x401, 0x9]}}, {{0x1c, 0x1, {0x7f, 0x3, 0xfff8, 0xe, 0x1, 0xffff0a2c, 0x8001, 0x7}}, {0x12, 0x2, [0x8480, 0x4, 0x2, 0x6, 0x1, 0x7, 0x401]}}]}, @qdisc_kind_options=@q_qfg={0x8}, @TCA_RATE={0x6, 0x5, {0x0, 0x38}}, @TCA_INGRESS_BLOCK={0x8, 0xd, 0x200}]}, 0xb0}, 0x1, 0x0, 0x0, 0x40004}, 0x0)
r6 = socket(0x10, 0x3, 0x0)
r7 = socket(0x10, 0x3, 0x0)
setsockopt$netlink_NETLINK_TX_RING(r7, 0x10e, 0xc, &(0x7f0000000000)={0x10003, 0x0, 0xd7c4, 0xfffffff9}, 0x10)
write(r7, &(0x7f00000000c0)="240000001e005f0214fffffffffffff8070000001d0000050000000008000900ecffffff", 0x24)
ioctl$sock_SIOCGIFINDEX(r6, 0x8933, &(0x7f0000000180)={'wlan1\x00', <r8=>0x0})
sendmsg$nl_route_sched(r6, &(0x7f00000007c0)={0x0, 0x0, &(0x7f0000000780)={&(0x7f0000001540)=@newqdisc={0x40, 0x24, 0xf0b, 0x0, 0x25dfdbfe, {0x0, 0x0, 0x0, r8, {}, {0xffff, 0xffff}}, [@qdisc_kind_options=@q_etf={{0x8}, {0x14, 0x2, @TCA_ETF_PARMS={0x10, 0x1, {0x0, 0xb, 0x2}}}}]}, 0x40}}, 0xc0)
ioctl$sock_SIOCGIFVLAN_GET_VLAN_INGRESS_PRIORITY_CMD(r1, 0x8982, &(0x7f0000000680))
sendmmsg$inet(r0, &(0x7f0000000f80)=[{{&(0x7f00000004c0)={0x2, 0x4e21, @multicast2}, 0x10, &(0x7f0000000b40)=[{&(0x7f0000000500)="429678b3882644d5dcbfdb419518c4bd68727fa158e9954dd62d312fb08c4a6ac72fe19711584cc9b19d99a4b77b6a2f25026c1c01c44c250e8f5b4f5cdd72549dd0316eea72615b7057ef45ef6d6ae971a672ef96c868cc31889679a93837bee67ca16e4de376f3ecf1248413eb81c9055f025fdc202fd9c5ba4257c45b330625929f1c7309d666299e9b2a86e583e8114f87b23e0545b7efbbd5e150f05d7f75a809e76b7fc7dbb4187f6fc0bce69927edaa832e3978e37106eba6ac9610557c7afbb6802fb6c11c09fed84886ced1c47e46fe38", 0xd5}, {&(0x7f0000000700)="df2517f09c92bf6fbe745a60025775b4df24339a9c372d6daf2ed486d7e4c0e58cfec8f541b3afeab2cc50554cc7eb9d6e75825c7904db76613a65ebc46847c612dc02e1b70b7df098a801e048b192d14228ab3da7733efaf151845e1b581b29a4b0969a1b6ee796344f33298638bc33e912f502326dd573c2ed5e40", 0x7c}, {&(0x7f0000000780)="6bdd2b2ab26a1f4ada8e1fbde54023af023e74f17092c0ecc938435b03f5ac2181b58aff8f3cf79824054e67891d84e749338c4a3c5f6dbf1dc41a9e88aa1841140168bd94e42cb8f7fe97c166f6f9c0404ab42f0f42fc33b80c91e7d426a8a43486a40643a2010afdf614f68681e5c49e6ff605c8b2e5e42ebe38195357a6b9e0a6ed05fe452a0f53beaaf2bcbb9d168eb272e01c77a9a86e4f93ae376ed299f09ee7d7f035db18b2d60b0c9b7ab1ccb6be3734df540a68f57d122581c455e7f60f1dfbf31e80126ad54a", 0xcb}, {&(0x7f0000000880)="e63b5f0e76208442", 0x8}, {&(0x7f00000008c0)="953390c3315bbf47e8a641868af6d2955767342c7ada8c00b18b4d2ce1da18f4d6a42957afc5b84865ddc7c0f38f42170a3aa1e7664cdca72bb86dc0cb2fdcb24c0ec115ced671863070a4a2fddd2bb4f91adb6c5b4276d21e4e2fb70aa727be26716a694d69a9f5d98edca61ad1c25dedf58988fa0c73b26cf1adad024f16299e7086572e5ec6f2", 0x88}, {&(0x7f0000000980)="d84879ba1935ad0034b79d9c9126aa291a2f23ca105df973d2a6b1be8959b14eca23e5eb0ac05d558c5d2e0de37e", 0x2e}, {&(0x7f00000009c0)="e4c91220a2455d31c1005505498854310cd5281d16597a1ab735ad4e091e5698ac1b7540a0808e3bd5f2953ebdaadee0766560e46f78c9a5b17b1703ff0ef6437aec51d6e81c4843fc4e631b842667bc160227f0fdef94921aa70f9f6c1b40debeb86482c42cee0c103ac019fe7a818ee091c4cbc127fa761e9b6226bde83940c5cf06a35270256650ae12ef", 0x8c}, {&(0x7f0000000a80)="24cb4820745b4eee09c661a7b3afdbad4b153cd71c067d78f7c5776c1a82b4e94a26f23d5b0e5a9bf1a10a9c9308ce900f13ef45844a4c36918ec67750dd97a317cc4c29a4495b56c77bde610466bb51c1983542f35d90b1f6e1d81e511b25396611c748cf5ec48290568dfaf116a3edad38e302af255ee600a59f420f4b3cd6fcb89cc110b764ab532a82419fba7898962d408d34affe2da0", 0x99}], 0x8, &(0x7f0000000bc0)=[@ip_ttl={{0x14, 0x0, 0x2, 0x101}}], 0x18}}, {{&(0x7f0000000c00)={0x2, 0x4e23, @rand_addr=0x64010102}, 0x10, &(0x7f0000000e40)=[{&(0x7f0000000c40)="4c6a5bbdf0050c3b6e893f0f80dbd903e012dc158d6542de66bf707684ab2702", 0x20}, {&(0x7f0000000c80)="ae86430c75b9d76a3a8dd0c768beddf17f513259d599488642dee7a9bfcc06917144b9db57c0d839dced5d792d4c8b0d2065a4b1dbdcfed0b5a7eb111f6486a98f5af0623842e8d12f843baaf3d252771da5d0e1ca253fe7140037b14ab65a530270cf8e849f56074fbfec339dde6b6da2084a576e47a8ff76b20a71259dec6592740a5d4e9ec4e93c0d38fd0c3957ab3da04add440e3886", 0x98}, {&(0x7f0000000d40)="2dd0fa0083d37ff249077ffb40f0a5aee6e10c1851ae00f9e9d84ccec65f813ebcdab2f0740a7fe851e010e859c2e2af32e53e5fed90de1d2a901c64c77564c769adc1de23eab5838d9676b165537c72162a4e5a4edaff0891f00480aae255de0c9b043518269ee2964fb48edc87cffec5de371202a1ccdddbb9912e170abb1b0c9c5b531bae292f13cf3af92cf6bba78d5a3ae309907f3afd564312ae21f936a1757cafa69247cc61c8de03efcda53c7e2cc6742615ab9bce20f0a66a955b7248ba2e936c7597265f", 0xc9}], 0x3, &(0x7f0000000e80)=[@ip_ttl={{0x14, 0x0, 0x2, 0xcb5}}, @ip_tos_int={{0x14, 0x0, 0x1, 0xfffffff9}}, @ip_tos_int={{0x14, 0x0, 0x1, 0x5}}, @ip_pktinfo={{0x1c, 0x0, 0x8, {r5, @multicast1, @empty}}}, @ip_tos_int={{0x14, 0x0, 0x1, 0x5}}, @ip_tos_int={{0x14, 0x0, 0x1, 0x40}}, @ip_tos_int={{0x14, 0x0, 0x1, 0x7}}, @ip_pktinfo={{0x1c, 0x0, 0x8, {r8, @remote, @remote}}}, @ip_tos_int={{0x14, 0x0, 0x1, 0x5}}], 0xe8}}], 0x2, 0x20004810)

2.59730374s ago: executing program 3 (id=3663):
r0 = socket$nl_generic(0x10, 0x3, 0x10)
sendmsg$nl_generic(r0, &(0x7f0000000580)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000100)=ANY=[@ANYRESOCT=r0], 0x14}, 0x1, 0x0, 0x0, 0x80}, 0xc048)
syz_genetlink_get_family_id$mptcp(&(0x7f0000000740), r0)
r1 = bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000480)={0x6, 0x3, &(0x7f0000000680)=ANY=[@ANYBLOB="1800000002000000000000000000000095"], &(0x7f0000000040)='syzkaller\x00'}, 0x94)
bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000080)={r1, 0x5, 0x14, 0x0, &(0x7f0000000000)="259a53f271a76d2608004c6588a80a3888ca2f15", 0x0, 0xd11, 0x2a0, 0x0, 0x0, 0x0, 0x0, 0x2, 0x0, 0x40}, 0x50)

2.17331436s ago: executing program 1 (id=3670):
r0 = socket$nl_generic(0x10, 0x3, 0x10)
r1 = syz_genetlink_get_family_id$fou(&(0x7f0000000100), 0xffffffffffffffff)
sendmsg$FOU_CMD_ADD(r0, &(0x7f00000001c0)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000040)={0x24, r1, 0xd1bd17c4b9ef5e5b, 0x70bd26, 0x25dfdbfc, {}, [@FOU_ATTR_PEER_V4={0x8, 0x8, @loopback}, @FOU_ATTR_PEER_PORT={0x6, 0xa, 0x4e23}]}, 0x24}}, 0x90)
bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000600)={0x10, 0x3, &(0x7f0000000000)=ANY=[@ANYBLOB="620ac4ff0000000071100d000000000095"], &(0x7f0000000480)='GPL\x00'}, 0x94)

2.102839851s ago: executing program 0 (id=3671):
sendmsg$NFT_BATCH(0xffffffffffffffff, 0x0, 0x0) (async)
sendmsg$NFT_BATCH(0xffffffffffffffff, 0x0, 0x0)
socket$nl_route(0x10, 0x3, 0x0) (async)
r0 = socket$nl_route(0x10, 0x3, 0x0)
sendmsg$nl_route(r0, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000700)={&(0x7f0000000000)=ANY=[@ANYBLOB="5c0000001000090400"/20, @ANYRES32=0x0, @ANYBLOB="000000000000000028001280090001007665746800000000180002801400010000000000", @ANYRES32=0x0, @ANYBLOB="00000000000000000a0001"], 0x5c}}, 0x0)
bpf$PROG_LOAD(0x5, &(0x7f0000000000)={0x6, 0x8, &(0x7f0000001f80)=ANY=[@ANYBLOB="7a0af8ff7525732cbfa100000000000007010000f8ffffffb702000005000000bf130000000000008500000006000000b700000000000000950000f700000000b2595285fa97ead0169191d54f8196217fc563e2fc91f6da4dad4fdc2eb1b5956fc4a33ca263e2b5d47b2b00000000b1a297cfddd73f30f2382f6c2d3ffdd45be583823c0f092248a57d48621f3c1c65ee19ee875daf45006a4c4ea5e15b2f9618d547244a22000010000800db583620ce7243d1aebdb638d91dbef6619358399aa9c2acd068c03efefd8bc77edf2d34b12cd48a1b20fb7dd843267e0331759f4ec6b5b0af58e604f494eff289026d5045ef08000000000000007718a09f4886afc26abba34635d0e8b598a51bc742135a6e1d33fe226c944bc70bb30d435aa8b5202db761014b1b999a12df6bee431a6681000000263b6233e1c0fe30e3841bef895c5a637b0bf2eac3cb07b74a72291a1a2b523dd81b6651b1ee29e999bb004823ebcd8c65743f31f84b263ab9b3426692d01ad194f302d7a658e90000000001000000b6b2f25ddb8c640ab321a402058c92cdfbea882b0b18914781ceb10814cf4ee23ddb79fff5eb156e0a000000000000f2bd164a178d86d6935eb8b75bc4eb680d10e8b6a54c6c8674caf63ff76622939a20d4aadf85db40179c2cf83ee07e30a279d8fdf3bc282deb43a03409f8e6972f3f720d045923702cede0f3e91411f3f1b16f065624f280a7dcce8db910f93c49b9e0aa390d0da6972ed719d7e0efb2bb713d1890e317c8de105c3933fd5d5bf38f6b9fc39fc829dcfe4af8ac5fbb7314a7a433e0182767d1376eda2b9c66200349e62d4d0ab1a1dc51907c980000cfb215af2c1a3c22243cce23b00000a857d61b0d66c3f6da8aed31027c33204ea0fa0620111920d3f24980e9995a510bd87b06440a0a26130098b901c53a02cfbfd8bcbdec9f34542c3c9652adefde555ecd28ebc88082bab431ee3e1adb5b0ad14c79dd4411ecc96c512f3b72a9b3a0c3e07ec6b427bdc0bf3963e9f802a5feab82a989db62d8d1339f842b3f593d6c24fe015ec63c658ba7c4fae17514f802709ab4fa5caa932d4b65a5ecfc422899513ddde6ec04974f9981a8c155c26e0da70e524832ab04dec9ce66a62ceffbb15b1857c93666fe043a266a451f9a1e1f054211b9ae566b58f4f356c7a4054ce13f6fcc58912a175bd9cc3c494894ad39b36e34e608f4ac00cf22c27bb8c12bcf4beeb579fc9fa1c9"], &(0x7f0000000100)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @xdp, 0xffffffffffffffff, 0x8, 0x0, 0xd}, 0x48)
bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000640)={0x1e, 0x4, &(0x7f0000000040)=@framed={{}, [@ldst={0x1, 0x2, 0x3, 0x2, 0x1, 0x15}]}, &(0x7f0000000000)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x24}, 0x80)
pipe(&(0x7f0000000000)={0xffffffffffffffff, <r1=>0xffffffffffffffff})
r2 = socket$inet_tcp(0x2, 0x1, 0x0)
bind$inet(r2, &(0x7f00000000c0)={0x2, 0x4e21, @broadcast}, 0x10) (async)
bind$inet(r2, &(0x7f00000000c0)={0x2, 0x4e21, @broadcast}, 0x10)
connect$inet(r2, &(0x7f0000000180)={0x2, 0x4e21, @dev={0xac, 0x14, 0x14, 0x1f}}, 0x10)
shutdown(r2, 0x1)
splice(r2, 0x0, r1, 0x0, 0xf3a, 0xc)
socket$inet6(0xa, 0x800, 0x6) (async)
socket$inet6(0xa, 0x800, 0x6)

1.981772306s ago: executing program 4 (id=3673):
bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, 0x0, 0x0)
r0 = socket$nl_route(0x10, 0x3, 0x0)
r1 = socket$pppoe(0x18, 0x1, 0x0)
connect$pppoe(r1, &(0x7f0000000100)={0x18, 0x0, {0x4, @local, 'ip_vti0\x00'}}, 0x1e)
bpf$BPF_GET_MAP_INFO(0xf, &(0x7f00000000c0)={0xffffffffffffffff, 0x58, &(0x7f0000000040)}, 0x10)
r2 = socket$netlink(0x10, 0x3, 0xc)
sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000300)={&(0x7f0000000040)=@newlink={0x3c, 0x10, 0x401, 0x0, 0x0, {}, [@IFLA_LINKINFO={0x1c, 0x12, 0x0, 0x1, @ipip={{0x9}, {0xc, 0x2, 0x0, 0x1, [@IFLA_IPTUN_REMOTE={0x8, 0x3, @local}]}}}]}, 0x3c}}, 0x0)
r3 = socket(0x2, 0x80805, 0x0)
getsockopt$inet_sctp6_SCTP_SOCKOPT_CONNECTX3(r3, 0x84, 0x6f, &(0x7f00000000c0)={0x0, 0x1c, &(0x7f00000009c0)=[@in6={0xa, 0x4e21, 0x3, @private1, 0x1}]}, &(0x7f0000000a00)=0x10)
bind$netlink(r2, &(0x7f0000514ff4)={0x10, 0x0, 0x0, 0x2ffffffff}, 0xc)
setsockopt$netlink_NETLINK_BROADCAST_ERROR(r3, 0x10e, 0x4, &(0x7f0000000140)=0x7, 0x4)
setsockopt$sock_int(r2, 0x1, 0x8, &(0x7f0000000200), 0x4)
r4 = socket$nl_netfilter(0x10, 0x3, 0xc)
r5 = socket$nl_netfilter(0x10, 0x3, 0xc)
getsockopt$IP_SET_OP_GET_BYINDEX(r4, 0x1, 0x53, &(0x7f0000000940)={0x7, 0x7, 0x2}, &(0x7f0000000980)=0x28)
sendmsg$IPCTNL_MSG_CT_NEW(r5, &(0x7f0000000300)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000000)=ANY=[], 0x84}}, 0x0)
r6 = socket$nl_netfilter(0x10, 0x3, 0xc)
sendmsg$IPCTNL_MSG_CT_DELETE(r4, &(0x7f0000000300)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f0000000640)={0x14, 0x2, 0x1, 0x5, 0x0, 0x0, {0x2, 0x0, 0x8}}, 0x14}, 0x1, 0x0, 0x0, 0x20044804}, 0x40040)
sendmsg$IPCTNL_MSG_CT_GET_DYING(r6, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000100)={&(0x7f0000000040)={0x14, 0x6, 0x1, 0x101, 0x0, 0x0, {0x0, 0x0, 0x4}}, 0x14}, 0x1, 0x0, 0x0, 0x2404c031}, 0x20000000)
sendmsg$nl_route(r0, &(0x7f0000000200)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000000)=ANY=[@ANYBLOB="30000000100001006c4789ec390bca4900000000", @ANYRES32=0x0, @ANYBLOB="211000000300000008001b0000000000080004000180"], 0x30}, 0x1, 0x0, 0x0, 0x801}, 0x40084)
r7 = socket$inet6_udp(0xa, 0x2, 0x0)
pwrite64(r0, &(0x7f0000000840)="ed27e8d9df4df89c6b34b42af00d44c353f91948d9bc9ea52e7d8ab01d4d6a4c7939bc79f9fd5045b57d1406b35e5004fa30374c71744e1e715694f1468177b42d00be36b44c0a7216ec1a5ab36214798426ea7e7761972221cd9aee65df48d9ba90cd945a42114041661628ccdd04ecca1b88c8a4515893e86074a6bd1184450704a55146", 0x85, 0x5)
ioctl$FS_IOC_GET_ENCRYPTION_POLICY_EX(r5, 0xc0096616, &(0x7f0000000900)={0x7, [0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0]})
setsockopt$IP6T_SO_SET_REPLACE(r7, 0x29, 0x40, &(0x7f0000000280)=@mangle={'mangle\x00', 0x2, 0x6, 0x530, 0x2a0, 0x2a0, 0x1b0, 0xd0, 0x0, 0x460, 0x460, 0x460, 0x460, 0x460, 0x6, 0x0, {[{{@uncond, 0x0, 0xa8, 0xd0, 0x0, {0x7a00000010000000}}, @HL={0x28}}, {{@ipv6={@mcast2, @dev, [0x0, 0xffffffff], [], 'veth1_macvtap\x00', 'veth1_vlan\x00'}, 0x0, 0xa8, 0xe0}, @common=@inet=@SET3={0x38, 'SET\x00', 0x3, {{}, {0x8000}, {}, 0x300}}}, {{@ipv6={@mcast1, @initdev={0xfe, 0x88, '\x00', 0x0, 0x0}, [], [], 'veth0_vlan\x00', 'bond_slave_0\x00'}, 0x0, 0xa8, 0xf0, 0x48000000}, @DNPT={0x48, 'DNPT\x00', 0x0, {@ipv6=@rand_addr=' \x01\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x01', @ipv4=@private=0xa010102, 0x1f, 0x20, 0x80}}}, {{@uncond, 0x0, 0xa8, 0xf0}, @SNPT={0x48, 'SNPT\x00', 0x0, {@ipv4=@broadcast, @ipv4=@loopback}}}, {{@ipv6={@loopback, @mcast1, [0xff000000, 0xffffff00, 0xffffff00, 0xffffff00], [0x0, 0xffffffff, 0xffffffff, 0xff000000], 'geneve1\x00', 'netpci0\x00', {}, {0xff}, 0x33, 0xe5, 0x1, 0x24}, 0x0, 0xa8, 0xd0}, @HL={0x28}}], {{'\x00', 0x0, 0xa8, 0xd0}, {0x28}}}}, 0x590)
connect$pppoe(r1, &(0x7f0000000240)={0x18, 0x0, {0xfffe, @multicast}}, 0x1e)

1.972042484s ago: executing program 1 (id=3674):
mmap(&(0x7f0000001000/0xc00000)=nil, 0xc00000, 0x0, 0x3032, 0xffffffffffffffff, 0x0)
getsockopt$bt_hci(0xffffffffffffffff, 0x0, 0x3, &(0x7f0000000180)=""/246, &(0x7f00000003c0)=0xfffffffffffffe26)
r0 = socket$inet6_sctp(0xa, 0x801, 0x84)
sendmmsg$inet6(r0, &(0x7f00000025c0)=[{{&(0x7f0000000000)={0xa, 0x0, 0x0, @private1}, 0x1c, &(0x7f0000000300)=[{&(0x7f0000000040)='P', 0x1}], 0x1}}], 0x1, 0x0)
shutdown(r0, 0x1)
r1 = socket$inet_udp(0x2, 0x2, 0x0)
setsockopt$inet_MCAST_JOIN_GROUP(r1, 0x0, 0x2a, &(0x7f0000000180)={0x2, {{0x2, 0x0, @multicast2}}}, 0x88)
setsockopt$inet_MCAST_MSFILTER(r1, 0x0, 0x30, &(0x7f0000000c80)=ANY=[@ANYBLOB="020000000000000002000000e0000002000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000a00000002000000ffffffff00000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000002000000ac1414aa00000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000002000000e000000100000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000002000000ac1e0001000000000000000000000080000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000020000007f000001000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000020000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000002000000e000000200000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000002000000e000000200000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000002000000ac1414bb00000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000002"], 0x590)
setsockopt$inet_group_source_req(r1, 0x0, 0x2c, &(0x7f00000004c0)={0x2, {{0x2, 0x0, @multicast2}}, {{0x2, 0x0, @empty}}}, 0x108)
getsockopt$EBT_SO_GET_ENTRIES(r1, 0x0, 0x81, &(0x7f0000000880)={'filter\x00', 0x0, 0x3, 0x99, [0x5, 0x7, 0x7, 0x4, 0x4, 0x8001], 0x2, &(0x7f0000000080)=[{}, {}], &(0x7f00000007c0)=""/153}, &(0x7f0000000900)=0x78)
r2 = openat$tcp_congestion(0xffffffffffffff9c, &(0x7f0000000000), 0x1, 0x0)
writev(r2, &(0x7f00000000c0)=[{&(0x7f0000000040)="2f30c8307b0a", 0x6}], 0x1)
getsockopt$inet_sctp6_SCTP_STATUS(r0, 0x84, 0xe, &(0x7f0000000540)={0x0, 0x81, 0x7, 0x61, 0x9, 0x2, 0x6, 0x1, {0x0, @in6={{0xa, 0x4e20, 0x8001, @private0, 0x5}}, 0x4, 0x4736, 0xc, 0x83a8, 0x9}}, &(0x7f0000000480)=0xb0)
r3 = socket$alg(0x26, 0x5, 0x0)
bind$alg(r3, &(0x7f0000000340)={0x26, 'skcipher\x00', 0x0, 0x0, 'ctr(anubis-generic)\x00'}, 0x58)
setsockopt$ALG_SET_KEY(r3, 0x117, 0x1, &(0x7f0000000140)="2c385aa3d49100dc6626c892b6bc436a", 0x10)
r4 = syz_init_net_socket$llc(0x1a, 0x1, 0x0)
setsockopt$llc_int(r4, 0x10c, 0x2, &(0x7f0000000140), 0x4)
sendmsg$nl_route_sched_retired(0xffffffffffffffff, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000280)={0x0}, 0x1, 0x0, 0x0, 0x40081d0}, 0x4000000)
recvmmsg$unix(0xffffffffffffffff, &(0x7f0000000c00)=[{{0x0, 0x0, &(0x7f0000000300)=[{&(0x7f0000002a00)=""/4100, 0x1004}], 0x1}}], 0x1, 0x0, 0x0)
bpf$ENABLE_STATS(0x20, 0x0, 0x0)
r5 = bpf$MAP_CREATE(0x0, &(0x7f0000000280)=@base={0x7, 0x4, 0x8, 0x1}, 0x48)
r6 = bpf$PROG_LOAD(0x5, &(0x7f0000000680)={0x11, 0x8, &(0x7f0000000740)=ANY=[@ANYBLOB="1800000000000000000000000000000018120000", @ANYRES32=r5, @ANYBLOB="0000000000000000b703000020000000850000001b000000b70000000000000095"], &(0x7f0000000780)='GPL\x00', 0x0, 0x0, 0x0, 0x41000, 0x0, '\x00', 0x0, @fallback, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94)
bpf$PROG_BIND_MAP(0xa, &(0x7f0000000500)={r6}, 0xc)
socket$inet_udp(0x2, 0x2, 0x0)
recvfrom(r4, &(0x7f0000000c40)=""/4096, 0x1000, 0x0, &(0x7f0000000400)=@l2tp6={0xa, 0x0, 0x2, @mcast1, 0x1, 0x3}, 0x80)

1.765526793s ago: executing program 3 (id=3676):
r0 = socket(0x10, 0x3, 0x0)
r1 = socket(0x10, 0x3, 0x0)
ioctl$sock_SIOCGIFINDEX(r1, 0x8933, &(0x7f0000000040)={'sit0\x00', <r2=>0x0})
sendmsg$nl_route(r1, &(0x7f0000000080)={0xffffffffffffffff, 0x0, &(0x7f00000000c0)={&(0x7f0000000240)=@ipv6_newnexthop={0x20, 0x68, 0x1, 0x0, 0x0, {0xa, 0x0, 0x0, 0x0, 0x4}, [@NHA_OIF={0x8, 0x5, r2}]}, 0x20}}, 0x0)
socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000240)={0xffffffffffffffff, <r3=>0xffffffffffffffff})
ioctl$sock_SIOCGIFINDEX(r3, 0x8933, &(0x7f0000000000)={'lo\x00', <r4=>0x0})
sendmsg$nl_route_sched(r0, &(0x7f0000000040)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f00000003c0)=@newqdisc={0x3c, 0x24, 0xd0f, 0x70bd2b, 0x0, {0x60, 0x0, 0x0, r4, {0x0, 0xfff8}, {0xffff, 0xffff}, {0xa, 0xfff1}}, [@qdisc_kind_options=@q_gred={{0x9}, {0x4}}, @TCA_EGRESS_BLOCK={0x8}]}, 0x3c}, 0x1, 0x0, 0x0, 0x404c044}, 0x40)
r5 = accept4(r0, 0x0, &(0x7f0000000080), 0x0)
sendmsg$IPCTNL_MSG_TIMEOUT_DEFAULT_GET(r5, &(0x7f0000000200)={&(0x7f0000000100)={0x10, 0x0, 0x0, 0x20000}, 0xc, &(0x7f00000001c0)={&(0x7f0000000140)={0x4c, 0x4, 0x8, 0x801, 0x0, 0x0, {0x1, 0x0, 0x9}, [@CTA_TIMEOUT_DATA={0x14, 0x4, 0x0, 0x1, @icmp=[@CTA_TIMEOUT_ICMP_TIMEOUT={0x8, 0x1, 0x1, 0x0, 0x3}, @CTA_TIMEOUT_ICMP_TIMEOUT={0x8, 0x1, 0x1, 0x0, 0x10}]}, @CTA_TIMEOUT_NAME={0x9, 0x1, 'syz1\x00'}, @CTA_TIMEOUT_NAME={0x9, 0x1, 'syz1\x00'}, @CTA_TIMEOUT_NAME={0x9, 0x1, 'syz0\x00'}]}, 0x4c}, 0x1, 0x0, 0x0, 0x10}, 0x80)

1.54829931s ago: executing program 1 (id=3677):
r0 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x16, 0xb, &(0x7f0000000580)=ANY=[], &(0x7f0000000200)='GPL\x00', 0x0, 0x0, 0x0, 0x41100, 0x0, '\x00', 0x0, @flow_dissector, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94)
bpf$BPF_PROG_TEST_RUN(0x1c, &(0x7f00000004c0)={r0, 0x3, 0x11, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x8}, 0x44) (async)
bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000001240)={r0, 0x0, 0xa6, 0x93, &(0x7f0000000040)="f7fd26a6c96d677f7d1d50cded9eef46a70a3727a8b53dd9725a297297215e3d8710b5e75688b090cf8a3fa1ec9eda1e87ceb1ec69a7c9dc8de95b7c4c11f58a759df69d2145906302007c3a6be791e95b327cfd44dca0f18e57755d90f6e855603c431e471200d8a6241885321a9827e10320171c8fa166a7557dc9968fc6112ff5bf2dcac80ae64b9283cd1b66f31057eef74d85dec9405910e4fbb6522f65d6f02ddf946d", &(0x7f0000000140)=""/147, 0x7, 0x0, 0x1000, 0x25, &(0x7f0000000200)="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", &(0x7f0000001200)="daa9ebae77bc8b7a74c4de26da631cf436f51aff8b6e27b18bd2c36ce24ceccb6d768907d0", 0x2, 0x0, 0xd15}, 0x50)
bpf$PROG_LOAD(0x5, &(0x7f00000054c0)={0xe, 0x16, &(0x7f0000001c80)=ANY=[@ANYBLOB="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"], &(0x7f0000000100)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @sk_skb, 0xffffffffffffffff, 0x8, &(0x7f0000000000), 0x8}, 0x94)

1.513033592s ago: executing program 4 (id=3678):
r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000100), 0x0, 0x0)
ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f0000000040)={'syzkaller0\x00', 0x2})
r1 = openat$tun(0xffffffffffffff9c, &(0x7f00000001c0), 0x4a002, 0x0)
ioctl$TUNSETLINK(r0, 0x400454cd, 0x207)
socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000000))
r2 = socket$nl_generic(0x10, 0x3, 0x10)
r3 = syz_genetlink_get_family_id$tipc(&(0x7f0000000200), 0xffffffffffffffff)
sendmsg$TIPC_CMD_ENABLE_BEARER(r2, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000280)={&(0x7f0000000080)=ANY=[@ANYBLOB='8\x00\x00\x00', @ANYRES16=r3, @ANYBLOB="011d0000000000000000010000000000000001410000001c001700000000000000ed6474683a7379"], 0x38}}, 0x0)
close(r1)
socket(0x2, 0x5, 0x0)
r4 = bpf$MAP_CREATE(0x0, &(0x7f0000000280)=@base={0x1b, 0x0, 0x0, 0x8000}, 0x48)
bpf$PROG_LOAD(0x5, &(0x7f0000000f00)={0x1f, 0xf, &(0x7f0000000680)=@ringbuf={{}, {{0x18, 0x1, 0x1, 0x0, r4}, {}, {}, {0x85, 0x0, 0x0, 0xb2}}, {}, [], {{}, {0x7, 0x0, 0xb, 0x2, 0x0, 0x0, 0x1}, {0x85, 0x0, 0x0, 0x85}}}, &(0x7f0000000080)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x1d, '\x00', 0x0, @fallback, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90)
bpf$MAP_DELETE_BATCH(0x1b, &(0x7f0000000180)={&(0x7f0000000400)="b26b6d66a0d6647b7ffafd109ad627f42057ec84194403b2ecf43fe6a55124805284f01cd7fc474d002e622dc7d210d3b0be728d66d4eab7a582b8eb0fd02768b055670cc68971d0dba868e51bef02646367aa51c4739d46b721939ba7429ea0d878a935c3ab07a0ff639dbd26ec49947381562823da7ac633b96d12f4d6b5e66d801375997ec0fc5b82da10261699a81ea7379f332c42d637e47866fa90e700518704000000000000004545089099cea5dc4db15f1876021827aefdeeccdeac74d4d45523b7d5acfc427b8845c5dea8b7473d98ef0e0a72c84f", &(0x7f0000000140)=""/61, &(0x7f0000000300)="838c1427bfcc88db154b7b47c30e", &(0x7f0000000340)="17d90dd2442ca65e7755c8dc7a67545a62d96b1756fb52063448824a23969037c3614401324ff7da5878a07ec185c7996a069d538af1fdb1b3a89668d704a4174e9f8ca21a63e0a0a85ae37f49746a613493d2bb3a70e83256f0dbd0", 0xffffffff, r4, 0x4}, 0x38)
ioctl$SIOCSIFHWADDR(r1, 0x8914, &(0x7f00000000c0)={'veth0_to_bridge\x00', @link_local={0x1, 0x80, 0xc2, 0x0, 0x0, 0xd}})

1.476144735s ago: executing program 0 (id=3679):
socketpair$nbd(0x1, 0x1, 0x0, &(0x7f00000000c0)={<r0=>0xffffffffffffffff, <r1=>0xffffffffffffffff})
recvmmsg(r0, &(0x7f0000003300)=[{{0x0, 0x0, &(0x7f0000001900)=[{&(0x7f0000000600)=""/164, 0xa4}], 0x1, &(0x7f0000001980)=""/4096, 0x1000}, 0x3}], 0x1, 0x0, 0x0)
r2 = socket$inet6(0xa, 0x5, 0x0)
setsockopt$sock_int(r2, 0x1, 0x2c, &(0x7f0000000040)=0x800, 0x4)
setsockopt$SO_ATTACH_FILTER(r2, 0x1, 0x2c, &(0x7f0000000000)={0x0, 0x0}, 0x10)
r3 = socket$phonet_pipe(0x23, 0x5, 0x2)
ioctl$SIOCPNENABLEPIPE(r3, 0x89e0, 0x500)
write(r1, &(0x7f0000003400)="d3", 0x1)

1.389611223s ago: executing program 3 (id=3680):
r0 = socket$inet_tcp(0x2, 0x1, 0x0)
r1 = socket$pppl2tp(0x18, 0x1, 0x1)
r2 = syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1)
setsockopt$bt_hci_HCI_DATA_DIR(r2, 0x0, 0x1, &(0x7f0000000040)=0x7, 0x4)
r3 = socket$inet6_udp(0xa, 0x2, 0x0)
connect$pppl2tp(r1, &(0x7f0000000380)=@pppol2tpin6={0x18, 0x1, {0x0, r3, 0x8, 0x0, 0x0, 0x0, {0xa, 0x0, 0x0, @rand_addr=' \x01\x00'}}}, 0x32)
r4 = socket$pppl2tp(0x18, 0x1, 0x1)
r5 = socket$nl_netfilter(0x10, 0x3, 0xc)
sendmsg$IPSET_CMD_CREATE(r5, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000100)={&(0x7f0000000040)={0x48, 0x2, 0x6, 0x101, 0x0, 0x0, {}, [@IPSET_ATTR_TYPENAME={0x12, 0x3, 'hash:net,port\x00'}, @IPSET_ATTR_REVISION={0x5, 0x4, 0x4}, @IPSET_ATTR_FAMILY={0x5, 0x5, 0xa}, @IPSET_ATTR_PROTOCOL={0x5}, @IPSET_ATTR_PROTOCOL={0x5}]}, 0x48}, 0x1, 0x0, 0x0, 0x20000001}, 0x4048000)
r6 = socket$inet6_udp(0xa, 0x2, 0x0)
r7 = bpf$BPF_BTF_LOAD(0x12, &(0x7f0000001340)={&(0x7f00000000c0)={{0xeb9f, 0x1, 0x0, 0x18, 0x0, 0x10, 0x10, 0x2, [@int]}}, 0x0, 0x2a}, 0x20)
bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000400)={0x11, 0xe, &(0x7f0000000300)=ANY=[@ANYBLOB="180000000000000000000000fcffff203a4098b605be1800000400"/36, @ANYRES32, @ANYBLOB="0000000000000000b703000000000000850000000c000000b7000000000000009500000000000000950000000000000018400000feffffff480000000000000095"], &(0x7f0000000040)='GPL\x00', 0x3, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, r7, 0x9, 0x0, 0x0, 0x10, &(0x7f0000000200), 0x10}, 0x90)
r8 = socket(0x10, 0x80003, 0x0)
write(r8, &(0x7f0000000000)="240000001a005f0214f9f407000904000a000000fe0000000000000008000f00fd000000", 0x85)
close(0x3)
connect$pppl2tp(r4, &(0x7f0000000040)=@pppol2tp={0x18, 0x1, {0x0, r6, {0x2, 0x0, @multicast2}, 0x2}}, 0x26)
r9 = socket$pppl2tp(0x18, 0x1, 0x1)
connect$pppl2tp(r9, &(0x7f0000000240)=@pppol2tpin6={0x18, 0x1, {0x0, 0xffffffffffffffff, 0x8, 0x1, 0x400, 0x0, {0xa, 0x0, 0xe38, @private0}}}, 0x32)
r10 = socket$nl_generic(0x10, 0x3, 0x10)
r11 = syz_genetlink_get_family_id$l2tp(&(0x7f0000000040), 0xffffffffffffffff)
sendmsg$L2TP_CMD_TUNNEL_GET(r10, &(0x7f0000000100)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000800)=ANY=[@ANYBLOB="14000000", @ANYRES16=r11, @ANYBLOB="250300000000000000000800"], 0x14}}, 0x0)
r12 = socket$alg(0x26, 0x5, 0x0)
close(0x3)
bind$alg(r12, &(0x7f0000000540)={0x26, 'rng\x00', 0x0, 0x0, 'drbg_pr_ctr_aes192\x00'}, 0x58)
setsockopt$ALG_SET_KEY(r12, 0x117, 0x1, &(0x7f0000000140)="2c385aa3d49100dc6626c892b6bc436a", 0x10)
r13 = accept4(r12, 0x0, 0x0, 0x0)
sendmsg$alg(r13, &(0x7f00000003c0)={0x0, 0x0, 0x0, 0x0, &(0x7f0000000180)=[@op={0x18, 0x117, 0x3, 0x1}], 0x18, 0x800}, 0x4000010)
syz_genetlink_get_family_id$nl80211(&(0x7f0000000040), r0)
sendmsg$NL80211_CMD_STOP_AP(r13, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000100)={&(0x7f0000000280)=ANY=[@ANYBLOB="0000000012a51009d1e92ffdb4ab9ca90c105fa3dc76de3939ec9ebdfeadfd2605818f39ec813d378039f8a450f2b8f1b813ab90004c3069cb92ce0bf9911682291730ef37982bd975ffb08a0d6b2db7f35094b53a2a4243f0d83184a63b55738d6f76f233b65e8f89fc290dfb026a4fb581df107cbd7c9203b13f2b2b219a9609d5ac54191b62829d550ed3d4e89e2388279f3a0ee704c419aaefd222e1d4d092b083dd7b5ce2891226701c8c9b40a64d47cd0144bc81cd2bd5e3f4abf30900000000", @ANYRES16=r2, @ANYBLOB="000429bd7000fedbdf2510000000"], 0x14}, 0x1, 0x0, 0x0, 0x50040}, 0xc090)
sendmsg$TIPC_NL_SOCK_GET(r8, &(0x7f0000000840)={&(0x7f0000000200)={0x10, 0x0, 0x0, 0x20000}, 0xc, &(0x7f00000007c0)={&(0x7f00000005c0)={0x1e0, 0x0, 0x0, 0x70bd2d, 0x25dfdbff, {}, [@TIPC_NLA_MON={0x24, 0x9, 0x0, 0x1, [@TIPC_NLA_MON_ACTIVATION_THRESHOLD={0x8, 0x1, 0x3}, @TIPC_NLA_MON_ACTIVATION_THRESHOLD={0x8}, @TIPC_NLA_MON_ACTIVATION_THRESHOLD={0x8, 0x1, 0x5}, @TIPC_NLA_MON_REF={0x8, 0x2, 0x4}]}, @TIPC_NLA_PUBL={0x14, 0x3, 0x0, 0x1, [@TIPC_NLA_PUBL_TYPE={0x8, 0x1, 0x13}, @TIPC_NLA_PUBL_TYPE={0x8, 0x1, 0x6}]}, @TIPC_NLA_SOCK={0x18, 0x2, 0x0, 0x1, [@TIPC_NLA_SOCK_HAS_PUBL={0x4}, @TIPC_NLA_SOCK_ADDR={0x8, 0x1, 0x292}, @TIPC_NLA_SOCK_REF={0x8, 0x2, 0x40}]}, @TIPC_NLA_NODE={0x60, 0x6, 0x0, 0x1, [@TIPC_NLA_NODE_UP={0x4}, @TIPC_NLA_NODE_UP={0x4}, @TIPC_NLA_NODE_KEY={0x4b, 0x4, {'gcm(aes)\x00', 0x23, "2f65c77f38722166ac432f137c9cc31c15f9b026b6c22ddf0d171be3e538ecf731d4fb"}}, @TIPC_NLA_NODE_KEY_MASTER={0x4}, @TIPC_NLA_NODE_KEY_MASTER={0x4}]}, @TIPC_NLA_MON={0x14, 0x9, 0x0, 0x1, [@TIPC_NLA_MON_ACTIVATION_THRESHOLD={0x8, 0x1, 0x2000}, @TIPC_NLA_MON_ACTIVATION_THRESHOLD={0x8, 0x1, 0x5}]}, @TIPC_NLA_LINK={0x108, 0x4, 0x0, 0x1, [@TIPC_NLA_LINK_PROP={0x24, 0x7, 0x0, 0x1, [@TIPC_NLA_PROP_MTU={0x8, 0x4, 0x7}, @TIPC_NLA_PROP_TOL={0x8}, @TIPC_NLA_PROP_MTU={0x8, 0x4, 0x2}, @TIPC_NLA_PROP_TOL={0x8}]}, @TIPC_NLA_LINK_PROP={0x3c, 0x7, 0x0, 0x1, [@TIPC_NLA_PROP_TOL={0x8, 0x2, 0xd67}, @TIPC_NLA_PROP_PRIO={0x8, 0x1, 0x5}, @TIPC_NLA_PROP_PRIO={0x8, 0x1, 0x8}, @TIPC_NLA_PROP_MTU={0x8, 0x4, 0x7}, @TIPC_NLA_PROP_MTU={0x8, 0x4, 0xe0060000}, @TIPC_NLA_PROP_MTU={0x8, 0x4, 0x9}, @TIPC_NLA_PROP_MTU={0x8, 0x4, 0x1000}]}, @TIPC_NLA_LINK_PROP={0x2c, 0x7, 0x0, 0x1, [@TIPC_NLA_PROP_TOL={0x8, 0x2, 0x70}, @TIPC_NLA_PROP_PRIO={0x8, 0x1, 0xa}, @TIPC_NLA_PROP_TOL={0x8, 0x2, 0x80000000}, @TIPC_NLA_PROP_WIN={0x8, 0x3, 0x7}, @TIPC_NLA_PROP_WIN={0x8, 0x3, 0x4}]}, @TIPC_NLA_LINK_NAME={0x13, 0x1, 'broadcast-link\x00'}, @TIPC_NLA_LINK_NAME={0x9, 0x1, 'syz0\x00'}, @TIPC_NLA_LINK_PROP={0x34, 0x7, 0x0, 0x1, [@TIPC_NLA_PROP_MTU={0x8, 0x4, 0xfffffffa}, @TIPC_NLA_PROP_MTU={0x8, 0x4, 0x4}, @TIPC_NLA_PROP_PRIO={0x8}, @TIPC_NLA_PROP_PRIO={0x8, 0x1, 0x10}, @TIPC_NLA_PROP_WIN={0x8, 0x3, 0xfffffffb}, @TIPC_NLA_PROP_MTU={0x8, 0x4, 0x4}]}, @TIPC_NLA_LINK_PROP={0x24, 0x7, 0x0, 0x1, [@TIPC_NLA_PROP_MTU={0x8, 0x4, 0x7}, @TIPC_NLA_PROP_WIN={0x8, 0x3, 0x20}, @TIPC_NLA_PROP_WIN={0x8, 0x3, 0x9}, @TIPC_NLA_PROP_MTU={0x8, 0x4, 0x4}]}]}]}, 0x1e0}, 0x1, 0x0, 0x0, 0xc040014}, 0x2400c000)

1.357906355s ago: executing program 1 (id=3681):
r0 = socket(0x1c, 0x3, 0x0)
ioctl$XFS_IOC_PATH_TO_FSHANDLE(0xffffffffffffffff, 0xc0385868, &(0x7f0000000200)={<r1=>0xffffffffffffffff, &(0x7f0000000100)='IPVS\x00', 0x18000, &(0x7f0000000140)={@align=0x4, {0xfffc, 0xd, 0xc9, 0x8}}, 0x2d87, &(0x7f0000000180), &(0x7f00000001c0)=0x1f71})
r2 = openat$cgroup_ro(r1, &(0x7f00000000c0)='memory.swap.current\x00', 0x275a, 0x0)
mmap(&(0x7f0000000000/0x400000)=nil, 0x400000, 0x300000d, 0x13, r2, 0xd7735000)
syz_genetlink_get_family_id$ipvs(&(0x7f0000000080), r2)
r3 = syz_init_net_socket$x25(0x9, 0x5, 0x0)
getpeername(r3, 0x0, 0x0)
r4 = syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1)
bind$bt_hci(r4, &(0x7f0000000080)={0x1f, 0xffff, 0x3}, 0x6)
setsockopt$bt_BT_SNDMTU(r4, 0x112, 0xc, &(0x7f00000001c0), 0x2)
setsockopt$netlink_NETLINK_TX_RING(r0, 0x10e, 0xc, &(0x7f0000000280)={0xfffffffc}, 0x9)
sendmsg$nl_generic(r0, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000001240)={0x24, 0x12, 0x7a6ee123a911b6d9, 0x0, 0x0, {0x80, 0x2}, [@generic="299a50bdc19377268b5707eafb"]}, 0x24}, 0x1, 0x0, 0x0, 0xc881}, 0x0)

1.197385926s ago: executing program 4 (id=3683):
r0 = socket$nl_generic(0x10, 0x3, 0x10)
r1 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000f80), r0) (async)
sendmsg$can_bcm(0xffffffffffffffff, &(0x7f0000000100)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000040)={0x2, 0xd4, 0x7, {}, {0x77359400}, {0x0, 0x0, 0x0, 0x1}, 0x1, @canfd={{0x4, 0x0, 0x1}, 0x27, 0x3, 0x0, 0x0, "33ff05fa4fb26c98cdda38a97e6c1c852f2a59831eaeb92810f3813d2b4a46525af86cf1fde1391814e19db8ed0994e1b548e8863900d0885f91215b87549940"}}, 0x80}, 0x1, 0x0, 0x0, 0x4040810}, 0x0) (async)
ioctl$sock_SIOCGIFINDEX_80211(r0, 0x8933, &(0x7f0000000180)={'wlan0\x00', <r2=>0x0})
sendmsg$NL80211_CMD_NEW_STATION(r0, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000240)={&(0x7f0000000140)={0x30, r1, 0x1, 0x70bd2c, 0x25dfdbff, {{0x12}, {@val={0x8, 0x3, r2}, @void}}, [@NL80211_ATTR_MAC={0xa, 0x6, @device_b}, @NL80211_ATTR_STA_PLINK_STATE={0x5, 0x74, 0x1}]}, 0x30}, 0x1, 0x0, 0x0, 0x40880}, 0x8008)

1.19630308s ago: executing program 0 (id=3684):
r0 = socket$nl_generic(0x10, 0x3, 0x10)
r1 = socket$nl_route(0x10, 0x3, 0x0)
syz_genetlink_get_family_id$tipc2(&(0x7f0000000080), r0)
sendmsg$nl_route(r1, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000400)={&(0x7f00000008c0)=ANY=[@ANYBLOB="540100001800010000000000000000001d0100001500030000000000000000008ca5be073cff296e040000001e0106000000fe000071ec6d721744cd5200080000f8cfcad4c4ec6511ec028c5028564abce83afe14c93e15e556c2baed7f897fe841c155a2b2a4b9f3052995cdf66a9c7922ff0300005b6c67281f1519cd7c32c2bf7563b9452575505da99ea128d37616896be8764a2c78edbad5bde7a5e405bdc893770338925f824bd24689c0d11a5568fc3aaa9ad0df766d8ea8d3bf1006e3df494e2f373148ecb4adafdd39874e9808b118301f1e76054a64c6d243523f5de7b347f3b740e105d0ed18fae7289635301ebd8949268090b3bcd4cbed5f1cfe93cff41a9630802f96defe9e8ea850529827c5e301953a8abaafa1f121e590f74e28233f4129d4587eee87ec5d42c3ef0619022c005c8d586b2a88d81866930fca15c8a95d29e5b2ea00000800050091"], 0x154}}, 0x0) (async)
sendmsg$nl_route(r1, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000400)={&(0x7f00000008c0)=ANY=[@ANYBLOB="540100001800010000000000000000001d0100001500030000000000000000008ca5be073cff296e040000001e0106000000fe000071ec6d721744cd5200080000f8cfcad4c4ec6511ec028c5028564abce83afe14c93e15e556c2baed7f897fe841c155a2b2a4b9f3052995cdf66a9c7922ff0300005b6c67281f1519cd7c32c2bf7563b9452575505da99ea128d37616896be8764a2c78edbad5bde7a5e405bdc893770338925f824bd24689c0d11a5568fc3aaa9ad0df766d8ea8d3bf1006e3df494e2f373148ecb4adafdd39874e9808b118301f1e76054a64c6d243523f5de7b347f3b740e105d0ed18fae7289635301ebd8949268090b3bcd4cbed5f1cfe93cff41a9630802f96defe9e8ea850529827c5e301953a8abaafa1f121e590f74e28233f4129d4587eee87ec5d42c3ef0619022c005c8d586b2a88d81866930fca15c8a95d29e5b2ea00000800050091"], 0x154}}, 0x0)
sendmsg$nl_generic(r0, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000040)=ANY=[@ANYBLOB="200000003600070127bd7000fddbdf0007"], 0x20}, 0x1, 0x0, 0x0, 0xc000}, 0x4040)
r2 = socket$inet_mptcp(0x2, 0x1, 0x106)
setsockopt$inet_tcp_TCP_MD5SIG(r2, 0x6, 0xe, &(0x7f00000001c0)={@in6={{0xa, 0x4e20, 0x7, @loopback, 0x40}}, 0x0, 0x0, 0x47, 0x0, "5f9eba67ac83f6e5a3ffc85fdc1122f8b56c8cf9e36b7a95672ef4cde7f4c3dad44b590f6292384fb8de317530354d95c87ae05ac3a6ecafc718517bc203209da67ceee48c573629218e0bb995aa2da5"}, 0xd8) (async)
setsockopt$inet_tcp_TCP_MD5SIG(r2, 0x6, 0xe, &(0x7f00000001c0)={@in6={{0xa, 0x4e20, 0x7, @loopback, 0x40}}, 0x0, 0x0, 0x47, 0x0, "5f9eba67ac83f6e5a3ffc85fdc1122f8b56c8cf9e36b7a95672ef4cde7f4c3dad44b590f6292384fb8de317530354d95c87ae05ac3a6ecafc718517bc203209da67ceee48c573629218e0bb995aa2da5"}, 0xd8)

1.059201294s ago: executing program 4 (id=3686):
r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000240), 0x0, 0x0)
ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f0000000040)={'syzkaller0\x00', 0x7101})
r1 = socket(0x10, 0x3, 0x0)
sendmsg$nl_route(r1, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000780)={&(0x7f0000000200)=ANY=[@ANYBLOB="3c0000001800dd8d000000000000000002"], 0x3c}, 0x1, 0x0, 0x0, 0x20000010}, 0x200000a0)
sendmmsg(r1, &(0x7f0000000000), 0x400000000000235, 0x0)
r2 = bpf$MAP_CREATE(0x0, &(0x7f0000000580)=@base={0x11, 0x4, 0x4, 0x9}, 0x50)
r3 = bpf$MAP_CREATE(0x0, &(0x7f0000000040)=ANY=[@ANYBLOB="0d000000020000000400080001000000ffffffff", @ANYRES32=r2, @ANYBLOB='\x00'/20, @ANYRES32=0x0, @ANYRES32, @ANYBLOB='\x00'/28], 0x48)
bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, &(0x7f00000008c0)={{r3}, &(0x7f0000000840), &(0x7f0000000880)=r2}, 0x20)
r4 = openat$tun(0xffffffffffffff9c, &(0x7f0000000040), 0x20702, 0x0)
ioctl$TUNSETIFF(r4, 0x400454ca, &(0x7f0000000080)={'syzkaller0\x00', 0xca58c30f81b6079f})
ioctl$TUNSETQUEUE(r4, 0x400454d9, &(0x7f0000000780)={'pim6reg0\x00', 0x400})
close(0x3)

981.278049ms ago: executing program 1 (id=3687):
socket$nl_route(0x10, 0x3, 0x0)
r0 = socket$inet6_udp(0xa, 0x2, 0x0) (async)
r1 = socket$nl_netfilter(0x10, 0x3, 0xc)
sendmsg$NFT_BATCH(r1, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000200)={{0x14, 0x10, 0x1, 0x0, 0x0, {0x1}}, [@NFT_MSG_NEWTABLE={0x20, 0x0, 0xa, 0x801, 0x0, 0x0, {0x1, 0x0, 0xfffc}, [@NFTA_TABLE_NAME={0x9, 0x1, 'syz0\x00'}]}, @NFT_MSG_NEWCHAIN={0x2c, 0x3, 0xa, 0x101, 0x0, 0x0, {0x1}, [@NFTA_CHAIN_NAME={0x9, 0x3, 'syz1\x00'}, @NFTA_CHAIN_TABLE={0x9, 0x1, 'syz0\x00'}]}, @NFT_MSG_NEWRULE={0x84, 0x6, 0xa, 0x401, 0x0, 0x0, {0x1}, [@NFTA_RULE_EXPRESSIONS={0x5c, 0x4, 0x0, 0x1, [{0x58, 0x1, 0x0, 0x1, @inner={{0xa}, @val={0x48, 0x2, 0x0, 0x1, [@NFTA_INNER_HDRSIZE={0x8, 0x4, 0x1, 0x0, 0x22}, @NFTA_INNER_TYPE={0x8, 0x2, 0x1, 0x0, 0x1}, @NFTA_INNER_EXPR={0x24, 0x5, 0x0, 0x1, @meta={{0x9}, @val={0x14, 0x2, 0x0, 0x1, [@NFTA_META_DREG={0x8, 0x1, 0x1, 0x0, 0x3}, @NFTA_META_KEY={0x8, 0x2, 0x1, 0x0, 0x1}]}}}, @NFTA_INNER_FLAGS={0x8}, @NFTA_INNER_NUM={0x8}]}}}]}, @NFTA_RULE_CHAIN_ID={0x8}, @NFTA_RULE_TABLE={0x9, 0x1, 'syz0\x00'}]}], {0x14}}, 0xf8}, 0x1, 0x0, 0x0, 0x8000}, 0x0) (async)
ioctl$sock_SIOCGIFINDEX(r0, 0x8933, &(0x7f0000000c80)={'lo\x00'})

944.863784ms ago: executing program 0 (id=3688):
sendmsg$key(0xffffffffffffffff, &(0x7f0000000040)={0x3, 0x0, &(0x7f0000000340)={&(0x7f0000000080)={0x2, 0x3, 0x0, 0x3, 0xa, 0x0, 0x0, 0x0, [@sadb_key={0x1, 0x9}, @sadb_address={0x5, 0x6, 0x0, 0x0, 0x0, @in6={0xa, 0x0, 0x0, @loopback}}, @sadb_sa={0x2, 0x1, 0x0, 0x0, 0x0, 0x0, 0xb, 0x1}]}, 0x50}, 0x1, 0x7}, 0x0)
r0 = bpf$BPF_BTF_LOAD(0x12, &(0x7f0000000140)={&(0x7f0000000040)={{0xeb9f, 0x1, 0x0, 0x18, 0x0, 0x18, 0x18, 0x4, [@func={0x2, 0x0, 0x0, 0xc, 0x2}, @func_proto]}, {0x0, [0x0, 0x5f]}}, 0x0, 0x34}, 0x20)
bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000200)={0x11, 0x3, &(0x7f0000000080)=ANY=[], &(0x7f0000000000)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, r0, 0x8, &(0x7f00000000c0)={0x0, 0x1}, 0x8}, 0x94)
r1 = socket$nl_generic(0x10, 0x3, 0x10)
r2 = syz_genetlink_get_family_id$wireguard(&(0x7f00000003c0), 0xffffffffffffffff)
r3 = bpf$TOKEN_CREATE(0x24, &(0x7f0000000000)={0x0, r1}, 0x8)
r4 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0xb, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x50, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffffffffe89, 0x0, 0x0, 0x0, 0x1}, 0x94)
ioctl$F2FS_IOC_MOVE_RANGE(r4, 0xc020f509, &(0x7f00000006c0)={<r5=>r3, 0x2, 0x275, 0x7fffffffffffffff})
ioctl$ifreq_SIOCGIFINDEX_batadv_hard(r1, 0x8933, &(0x7f0000000740)={'batadv_slave_1\x00', <r6=>0x0})
r7 = syz_open_procfs$namespace(0x0, &(0x7f0000000040)='ns/cgroup\x00')
mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f07ebbee6, 0x8031, r7, 0x215eb000)
bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000002840)={r4, 0x0, 0xf9, 0x1000, &(0x7f0000000880)="0c0563541194def9134aba4caeefb280ff3a4479cd6cfbfda78af184363a8e9e9180143f16abc7848650e67cc8c673348dd47e845ae1a150ba2175380f79894c536a2f9201d246d6ca0cd8b1c5cc956f68e1ef4700ed24b3540232850a2bce6f26883915b6e4032712931a69363fee1fa6069afae6f5340f7df8c1ff72fd77aa3b9eee18e373fc918ab85c25cac2e05c370b9a85ded1851bdf727f9d68501c3d4def11b7514935543f8f09e3da9016cb258edb1b020e4a4e5b7c0d7ccf6137839c197d9354788218094e626c62098e2ef7b1307277eed4f69311608bdb6e10858e0059f887fb8db42dbe7990cc297dfee0de7936d85fbc8f64", &(0x7f0000001700)=""/4096, 0x1, 0x0, 0xe1, 0x19, &(0x7f0000002700)="29a495248e86f79715fcf6e41d04c2dcbb271b861a5866a3ea0b99edc88d30d3e1a2765b165ece8effb0d47d01b93d46a23f268de97dd11e2f6069b5d1392d35fff6373784c5ab8a8fdd16f74675d102a22b591864a8a92ea14d2f6450afb9b46d8a3bfd6dfe42247242de981e357fa4c6420b0a558020019decf79ab53645ce21574ba7c845470051188e04e74c335cce52999a5bc2e335a385ee8326faef823f1c595d37bb2f6c4fc09333b9b793b4335a36fdf13e45d816ba9ae0ca37913caf38b8c4d6383d05064a11273c2471fa58c1834b09134005f25bd09f03e7193c03", &(0x7f0000002800)="271a2a6f88247a6f258bc7ec15acc99969b9fb312b3cb9da88", 0x0, 0x0, 0x1}, 0x50)
r8 = socket$nl_generic(0x10, 0x3, 0x10)
ioctl$sock_SIOCGIFINDEX_80211(r8, 0x8933, &(0x7f0000000200)={'wlan0\x00', <r9=>0x0})
r10 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000cc0), 0xffffffffffffffff)
r11 = gettid()
sendmsg$NL80211_CMD_SET_WIPHY_NETNS(r8, &(0x7f0000000dc0)={0x0, 0x0, &(0x7f0000000d80)={&(0x7f0000000d00)={0x24, r10, 0x1, 0x70bd2c, 0x25dfdbfb, {{}, {@void, @val={0x8, 0x3, r9}, @void}}, [@NL80211_ATTR_PID={0x8, 0x52, r11}]}, 0x24}, 0x1, 0x0, 0x0, 0x40000}, 0x4090)
sendmsg$nl_route(r5, &(0x7f0000000840)={&(0x7f0000000700)={0x10, 0x0, 0x0, 0x4}, 0xc, &(0x7f0000000800)={&(0x7f0000000980)=@dellinkprop={0x210, 0x6d, 0x2, 0x70bd2b, 0x25dfdbfd, {0x0, 0x0, 0x0, r6, 0x2, 0x2440}, [@IFLA_ADDRESS={0xa, 0x1, @random="af07356d8277"}, @IFLA_NET_NS_FD={0x8, 0x1c, r7}, @IFLA_GROUP={0x8, 0x1b, 0x6a}, @IFLA_NET_NS_PID={0x8, 0x13, r11}, @IFLA_VF_PORTS={0x1cc, 0x18, 0x0, 0x1, [{0x54, 0x1, 0x0, 0x1, [@IFLA_PORT_PROFILE={0x9, 0x2, 'TIPC\x00'}, @IFLA_PORT_PROFILE={0x9, 0x2, 'TIPC\x00'}, @IFLA_PORT_REQUEST={0x5, 0x6, 0x80}, @IFLA_PORT_INSTANCE_UUID={0x14, 0x4, "443bd7917fa38847a5c8e3839ae48541"}, @IFLA_PORT_PROFILE={0x13, 0x2, 'batadv_slave_1\x00'}, @IFLA_PORT_VF={0x8, 0x1, 0x101}]}, {0x28, 0x1, 0x0, 0x1, [@IFLA_PORT_INSTANCE_UUID={0x14, 0x4, "facb9710044bd925143709522baf63f5"}, @IFLA_PORT_VF={0x8, 0x1, 0x7}, @IFLA_PORT_PROFILE={0x8, 0x2, 'GPL\x00'}]}, {0x64, 0x1, 0x0, 0x1, [@IFLA_PORT_INSTANCE_UUID={0x14, 0x4, "8f91a6669cca635f2c278ab4ca2903f8"}, @IFLA_PORT_INSTANCE_UUID={0x14, 0x4, "a1da58527bc55ea0997064689a94fb6f"}, @IFLA_PORT_HOST_UUID={0x14, 0x5, "2d410db139eeb4767a8e035a42f0a86a"}, @IFLA_PORT_INSTANCE_UUID={0x14, 0x4, "0f56a8b986d1d28c22a46dc841cefa3c"}, @IFLA_PORT_VF={0x8, 0x1, 0xfffff8f2}, @IFLA_PORT_REQUEST={0x5, 0x6, 0x8}]}, {0x44, 0x1, 0x0, 0x1, [@IFLA_PORT_INSTANCE_UUID={0x14, 0x4, "c8d8d841b8bd159d7e3d5fe21dd8f9c2"}, @IFLA_PORT_HOST_UUID={0x14, 0x5, "d918581af150fb4bc9de3a8f2d25de75"}, @IFLA_PORT_VF={0x8, 0x1, 0x9}, @IFLA_PORT_VF={0x8, 0x1, 0x3}, @IFLA_PORT_VF={0x8, 0x1, 0x2}]}, {0x4c, 0x1, 0x0, 0x1, [@IFLA_PORT_REQUEST={0x5, 0x6, 0x3}, @IFLA_PORT_REQUEST={0x5, 0x6, 0x5}, @IFLA_PORT_HOST_UUID={0x14, 0x5, "b0fb2770c3ccf1ed7af3db7ebd5a0081"}, @IFLA_PORT_REQUEST={0x5, 0x6, 0x8}, @IFLA_PORT_VF={0x8, 0x1, 0x10000}, @IFLA_PORT_HOST_UUID={0x14, 0x5, "3d955ed5d4f8359c987286ef782f2ad2"}]}, {0x58, 0x1, 0x0, 0x1, [@IFLA_PORT_REQUEST={0x5, 0x6, 0x4}, @IFLA_PORT_VF={0x8, 0x1, 0x8}, @IFLA_PORT_REQUEST={0x5, 0x6, 0xcb}, @IFLA_PORT_VF={0x8, 0x1, 0x5}, @IFLA_PORT_VF={0x8, 0x1, 0x3}, @IFLA_PORT_INSTANCE_UUID={0x14, 0x4, "2aae0bf35d61f75513ad38dae6b7eb76"}, @IFLA_PORT_PROFILE={0x8, 0x2, '$]%\x00'}, @IFLA_PORT_VF={0x8}, @IFLA_PORT_REQUEST={0x5, 0x6, 0x5}]}]}]}, 0x210}, 0x1, 0x0, 0x0, 0x4000}, 0x81)
socket$nl_generic(0x10, 0x3, 0x10)
r12 = syz_genetlink_get_family_id$tipc(&(0x7f0000001600), 0xffffffffffffffff)
sendmsg$TIPC_CMD_SHOW_PORTS(r1, &(0x7f0000000580)={0x0, 0x0, &(0x7f0000000600)={&(0x7f0000000640)={0x1c, r12, 0x1}, 0x1c}}, 0x0)
sendmsg$TIPC_CMD_GET_REMOTE_MNG(r1, &(0x7f0000000540)={&(0x7f0000000480)={0x10, 0x0, 0x0, 0x2000000}, 0xc, &(0x7f0000000500)={&(0x7f00000004c0)={0x1c, r12, 0x400, 0x70bd2a, 0x25dfdbfc, {}, ["", "", ""]}, 0x1c}, 0x1, 0x0, 0x0, 0x4040040}, 0x2400c000)
bpf$BPF_PROG_QUERY(0x10, &(0x7f0000000380)={@cgroup, 0x22, 0x1, 0xd, &(0x7f0000000040)=[0x0, 0x0, 0x0, 0x0], 0x4, 0x0, &(0x7f00000002c0)=[0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0], &(0x7f0000000300)=[0x0, 0x0], &(0x7f0000000340)=[0x0, 0x0, 0x0, 0x0], <r13=>0x0}, 0x40)
bpf$BPF_PROG_GET_NEXT_ID(0xb, &(0x7f0000000440)={0xfff, <r14=>0x0}, 0x8)
bpf$BPF_PROG_DETACH(0x9, &(0x7f0000000400)={@ifindex, r4, 0x1a, 0x34, 0x0, @void, @void, @void, @value=r14, r13}, 0x20)
ioctl$XFS_IOC_INUMBERS(r3, 0x80405880, &(0x7f00000001c0)={{0x0, 0x2, 0x7069, 0x7, 0xe}, [{0x8000000000000000, 0x0, 0xe6}, {0xd, 0x7, 0x7, 0x4}, {0x8000000000000001, 0x0, 0x9, 0x80}, {0x64, 0xfffffffffffffffe, 0x1, 0x2}, {0x8000000000000000, 0x0, 0xd2, 0x4}, {0x1, 0x7, 0x3, 0x9}, {0x4, 0x7, 0xf}]})
r15 = socket$key(0xf, 0x3, 0x2)
sendmsg$key(r15, &(0x7f0000000000)={0x500, 0x0, &(0x7f0000000380)={0x0, 0x70}}, 0x4081)
sendmsg$WG_CMD_SET_DEVICE(r1, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000100)=ANY=[@ANYBLOB="8c3049c4b75fbd131722e92ebe685db6", @ANYRES16=r2, @ANYBLOB="0100000000000000000001000000680008806400008024000100f44da367a88ee6564f020211456727082f5cebee8b1bf5eb7337341b459b39223c0009801c0000800600010002000000080002007f00000105000300030000001c00008006000100020000000800020000000000050003000200000024000300b08073e8d44e91e3da922c22438244bb885c69e269c8e9d835b114293a4ddc6e1400020077673000"/174], 0xb4}, 0x1, 0x0, 0x0, 0x4004840}, 0x40000)

915.824066ms ago: executing program 3 (id=3689):
r0 = accept4$x25(0xffffffffffffffff, &(0x7f0000000140), &(0x7f00000001c0)=0x12, 0x80800)
ioctl$XFS_IOC_GETVERSION(r0, 0x80087601, &(0x7f0000000200))
r1 = openat$rfkill(0xffffffffffffff9c, &(0x7f00000002c0), 0x80080, 0x0)
ioctl$RFKILL_IOCTL_NOINPUT(r1, 0x5201)
r2 = openat$rfkill(0xffffffffffffff9c, &(0x7f0000001d80), 0x80800, 0x0)
r3 = socket$nl_route(0x10, 0x3, 0x0)
r4 = socket$inet6_udp(0xa, 0x2, 0x0)
ioctl$sock_SIOCGIFINDEX(r4, 0x8933, &(0x7f0000000c80)={'lo\x00', <r5=>0x0})
sendmsg$nl_route_sched(r3, &(0x7f0000001200)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000bc0)=@newqdisc={0x48, 0x24, 0x4ee4e6a52ff56541, 0x0, 0x0, {0x0, 0x0, 0x0, r5, {}, {0xffff, 0xffff}}, [@TCA_STAB={0x24, 0x8, 0x0, 0x1, [{{0x1c, 0x1, {0x80, 0x6, 0x3ff, 0x844, 0x1, 0x9, 0x10}}, {0x4}}]}]}, 0x48}}, 0x2000c010)
ppoll(&(0x7f0000000080)=[{r1, 0x2110}, {r1}], 0x2, &(0x7f00000000c0)={0x0, 0x3938700}, &(0x7f0000000100)={[0xb2]}, 0x8)
ioctl$RFKILL_IOCTL_NOINPUT(r2, 0x5201)
close(0x3)
r6 = socket$nl_generic(0x10, 0x3, 0x10)
sendmsg$nl_generic(r6, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000040)=ANY=[@ANYBLOB="d80000003f000701feffffff00000000017c0000040042800c00018006000600800a0000b1000280"], 0xd8}, 0x1, 0x0, 0x0, 0x6008815}, 0xc000)

784.953799ms ago: executing program 1 (id=3690):
r0 = socket$qrtr(0x2a, 0x2, 0x0)
connect$qrtr(r0, &(0x7f0000000040), 0xc)
r1 = socket$qrtr(0x2a, 0x2, 0x0)
connect$qrtr(r1, &(0x7f0000000040)={0x2a, 0x1, 0x4000}, 0xc)
writev(r1, &(0x7f0000000680)=[{&(0x7f0000000080)='~', 0x1}], 0x1)
ioctl$sock_qrtr_TIOCINQ(r0, 0x541b, &(0x7f0000000000))
ioctl$AUTOFS_IOC_EXPIRE_MULTI(r1, 0x40049366, &(0x7f0000000100)=0x2)
r2 = socket$nl_route(0x10, 0x3, 0x0)
r3 = syz_init_net_socket$bt_bnep(0x1f, 0x3, 0x4)
close(r2)
r4 = socket$inet_icmp_raw(0x2, 0x3, 0x1)
ioctl$XFS_IOC_ATTRLIST_BY_HANDLE(r1, 0x4058587a, &(0x7f00000003c0)={{<r5=>r0, &(0x7f0000000240)='\x00', 0x189040, &(0x7f0000000280)={@_ha_fsid={[0x7, 0xc]}, {0x0, 0x6, 0xca, 0x59b}}, 0x6, &(0x7f00000002c0), &(0x7f0000000300)=0x4}, {[0x902b, 0x18fa, 0x4, 0x7fffffff]}, 0x9, 0x48, &(0x7f0000000340)=""/72})
ioctl$IOCTL_GET_NCIDEV_IDX(0xffffffffffffffff, 0x0, &(0x7f0000000440)=<r6=>0x0)
ioctl$IOCTL_GET_NCIDEV_IDX(0xffffffffffffffff, 0x0, &(0x7f0000000780)=<r7=>0x0)
r8 = openat$nci(0xffffffffffffff9c, &(0x7f0000000240), 0x2, 0x0)
r9 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10)
r10 = syz_genetlink_get_family_id$nfc(&(0x7f0000000100), r9)
ioctl$IOCTL_GET_NCIDEV_IDX(r8, 0x0, &(0x7f00000000c0)=<r11=>0x0)
sendmsg$NFC_CMD_DEV_UP(r9, &(0x7f0000000200)={0x0, 0x0, &(0x7f0000000180)={&(0x7f00000002c0)=ANY=[@ANYBLOB="1c000000", @ANYRES16=r10, @ANYBLOB="010026bd7000fcdbdf250200000008000100", @ANYRES32=r11], 0x1c}}, 0x840)
ioctl$IOCTL_GET_NCIDEV_IDX(0xffffffffffffffff, 0x0, &(0x7f0000000cc0)=<r12=>0x0)
ioctl$IOCTL_GET_NCIDEV_IDX(r2, 0x0, &(0x7f0000000fc0)=<r13=>0x0)
sendmmsg$nfc_llcp(r5, &(0x7f0000002500)=[{&(0x7f0000000480)={0x27, r6, 0x1, 0x4, 0x7, 0xfe, "e3450657634f763eb53d2a524dacce423dfb940fb43e162518803efab1c131398f0b8320f17d74944a7909c43d743e70fe066a168f5eb64a2995c78e96e008", 0x8}, 0x60, &(0x7f0000000600)=[{&(0x7f0000000500)="2355e44247446330d3e67e285fa15d546680b21ce62d7035a4e80ea138f278cfaa730bd806954f8b21235b87c6a4146aa46e2eb68895fbb8e9b65e93f938cd9b79406e70c198b547eb89b15c801575e550da4d8c949dd38c8c0d23def40277bf582691656f4792bd5f06c8147347c067319f45822e4daf071f721542073ea5e33e269a98346dcab47495e1865f26c46b80c712a37ad3bc24512484318dba42478dff27e6b048b422f250bf493898baaba7b44f3b088392cc53a25daee02ad0b7385607", 0xc3}], 0x1, &(0x7f00000006c0)={0xa8, 0x3a, 0x7, "8a175c41f79e8bcaffc169c95cfe10e230dec2d94b95f07820fb7f703f8f37139b56c82293f1b4bb1849573951d51fc83370c00509652eafc4a060da27741ef71ac790688caaf87621b635849f9d9e459d15b5329619e6562ab91578c8d555f556da32c83a1a4b3dab43fb7772b4442b426658fb9e8ceb311e59e66739316fbd7a245f41bd4c4977c780f65f16b3f27698df5a97e50b1e92"}, 0xa8, 0x44000}, {&(0x7f00000007c0)={0x27, r7, 0x0, 0x3, 0x4, 0x0, "e9aa1331f31a8ec6942754264ac025fec8e8f8c01de1aafb43be36b281bb64da6cb6e32c48fa432f18c68ffbb72593b3070e5aafc47c22d4e38d46ecd9f727", 0x28}, 0x60, &(0x7f0000000a00)=[{&(0x7f0000000840)="4e50d6cbb9d39228c1468b640f19861441e36cf4ac53d65980afcb84d4b321aed8db53badfa0d6ede84f6b851313179e90649e7145c796d3a5873e072a60cd5b9c20db98f65e47efc2a19d0647a82eaac241de1933ca18a3c7408461cd09f946a1087cd3c2236f2f93bb60135e49b99f4dfd55c5a1bd6ba3a5ed1f30f5efe097bd6a197328b5c688081bb007a00289ed4381cfaa1fb4f02dcf61552d850ed72a38a507aacc074cd895d19d05d049866e98aae77662f1c6e7260c29091e8e5f7a128b30b38fe455867ea0be013e6dba979e147e71528b6e0f", 0xd8}, {&(0x7f0000000940)="24a9be6e8a7e9ee42001fc08b966eb4cbb10b237576b733adec02ce775d90f", 0x1f}, {&(0x7f0000000980)="e16bba66c2b19af4ca2801860991eb5f4bcebf1a96ded62a8484dadce439dc2359521ecfec8b2143e75c59ec4d026de282934c7e8f13aac1edb43099990132abb18086d122fd2989a1088d7231523ec894292a59ace60a77b9209189c3", 0x5d}], 0x3, 0x0, 0x0, 0x80}, {&(0x7f0000000a40)={0x27, r11, 0x1, 0x7, 0x3, 0x40, "4308bdebd519b6b4c76c441f12777f50493c0849f72c87b487ed6ffd6c5e86cf3cf9b9046f64b9d9cc2aea771177b5013dfb1f5c7f9e253a2dd5d2ae3a42c2", 0x32}, 0x60, &(0x7f0000000bc0)=[{&(0x7f0000000ac0)="eb018519a2952970d9ed261f6e61aeeb07f1d5627d55ee409cd5ba85f93590a260416a1384eecfab5e52c3bbb25f5244911a814e79990341c80cff1ddd2693161332b9f1f180ea13b49fd79575c42cd67692e69298c4fc24eaf336c3892ebb78d73b8d62377c7d66f727946a70127684949e9ec5f8db9e5f3478e44eedcf636f01a48826059e1d3ffb33145732ede404eeaa858a37c6833ab6212545f953362ba260db9ed156341d43faaae89acdd53320af62067d001f344d6c7a26f23ba6dca00383b68ad23eaacc64ee6d4bd6f3bf8784d49a6fd581e70e4b8e90ddeff437adee87b323ea66c671e4809219be674edf45", 0xf2}], 0x1, &(0x7f0000000c00)={0xb0, 0x0, 0x7ba0, "0a422852c9a9915b19b4c2be8847c8f6d125e2463c05ddd39d38f495bc32c06716c70c3798b9acf5cf0a096c113e82c9e3e249170d085ff7d0ae5cd6e2b55ace0b9a4719cfe1e098b489c3a6871f92ec207f071fb2920ba1dbc8ba72d962977b60c48268c2f46efce836458109477a8035e9198b401191b8071748127ef047888900f9e0a340f491288ae70f74fea6d9f278e95e795be731ed219086"}, 0xb0, 0x20048811}, {&(0x7f0000000d00)={0x27, r12, 0x1, 0x3, 0x0, 0x6, "faa1612d17e2d93e3ee4d608fd2f0568d90d26f8248731f9bad4743541d7775d17f8695846843b91b11cf1d338fb3e0c240886009ce8ef57eea4c82efe6b80", 0x18}, 0x60, &(0x7f0000000ec0)=[{&(0x7f0000000d80)="72c4ba64c00c3660f34301fd60d0cb7b9b5293781fba821ae3c640bfc4033ec8b632428ccda35d9618a49d0c9d62afee269bff8b6812ce0b9872211706c31430908b7f31c04a2a685de0546cdede1a71a85eca2981e16cd5246988e493bad7e9369f645574ba779a570f0bc9d60299fd216c4cf3ae06b07b2688305fcae3f8d3722dfabfc663e6bd5d74c84b893a1e4322a83b56bd326b353305b51234f08bd6f3ff1015182eac5cc05c3d0d083f030c22aa801667f2837ff0af686a84dee53220659fde52d34e121cd084c3c81c9d8c37e5278d1f06792f4f29", 0xda}, {&(0x7f0000000e80)}], 0x2, &(0x7f0000000f00)={0x90, 0x103, 0x8, "a4eaf4b899f1f36d49aa864afbc2a67888f2daa42f9b6ca937e44cc71235c894bd8c6daca2aff0c1800f49f59efb2a97a13189b084ba32420d37130b3979ea68c30b97cf9529c6a570b96b0503b642fec341a74ec6b47997b8f719402ad157536069f23de90951356d5f1c6ab5dfe69a1e486b33eb15b32b55"}, 0x90, 0x44094}, {&(0x7f0000001000)={0x27, r13, 0x0, 0x4, 0x4, 0xa9, "3891a4248c03b4747dad86ebfb4e7bcbe885b7172d61402b4d08e4c70d0220a74d163ca8a04e02f87d96895be26e3c5f8d08968d00e2594d4881c8261d0f1a", 0x3}, 0x60, &(0x7f00000022c0)=[{&(0x7f0000001080)="fc4ae4b233d252e0c82ea2e5cffecde8e7311c265d67fc9f61af3a677c706a5ae6ca21b81005d8743285adf42a17a1d3fc7043b59fdef6295a1d6fedc3835c915b05fde5c691a99f242f7d647ffd25fa742888a3ce2504b295c1f2059f9e3155b1e56f7dc420f9f512be7715ff075feb739cccabc37b15f0d220a8a015d32a9c1ba93bff67b105becd7355b6a632445466f77006a48717332364d86167a9feedbe7b79130c4205de8d6d134b7d44aabbd07ce933a17460ce082a7e4c3f03ba2606f8d9d8de059219a5d337", 0xcb}, {&(0x7f0000001180)="db2cd2a4fc973a59d1bac9a7ff4213990aebae51c92880aef6533fdb42ae8c87c75cf0e6a0b6c111cc51613c533c0310ad9e0235cff5ad5fe8313a6f8926d162f6e15c4f42905a0bf5f07120337f127cb5c9a1bde66c20d3c56ba807eb306b78538459fc0746e82597c58ce041d7c41db67924e91c12acee66b5abc84f25ac1ba624c2b492f9a210ef2cc279973b6eae38e0bdb4ac1826232f55140be96e57dd42d9d1acdd94c5eb581f3e7c9c85fc2439c7be24cbad745b26cb2ef532a9be3cd2d9accea10ff550eb368c99cc4af8d09f28678ea4656c3f950c412e8ca4fbfcf7cd98e4a2d0a514ad0d651d44370196011a4400998452e9df94b91edda9a1939eefb15476ed7f10725af677b828490181e0fc63fe4c49197035d8e511de44189a875d5b8864e1f6ffd5254286a82c5b5e50ddc6a7c0abb13bdc5e051c8bcea7343aa1b6aa4ca2334be480b63b72ac897a23429d7a8f993fd203f291c781964e255518a4b56403aa2ea7dae566793802065367b3494fc7b04cb5d4a63b152ea5ed8112e590c6e8a9384a68de9aa106744a490992b25fe28a420c531fe193dad05e7347392416730dee510e2410c2e28a63f0cefbc47f67c15c9cd5de5a92ae5641a8b581a7283ed06024b0f486dc48e26c4f3d2cccc6096a7873d95abed0fd8d92912e072cd5bb1e25058a064e859a0dba6fe297eb01bb18b07ab928995a27d4b72abb5ad4c4216d931a9420cfe3686f07f3a55786bb42e607e2609bffcf5c6c665941640cfd3a0794ea48e52816bdd285aed2db9f331fb17214c926d6be8ddbea7e03c6fa48340b804406dc515b8f89cd3a337a8f8852354df0b7b769a6be88b54cc73f35b5e86bf99babf2d3da1aa13ad4a6e1cd3613fafd6e831c94f300005ff73a076a0b619302adf127e33e25dc43efb7e2da3e26d0da73baf1056c04fc56a7984b230d6ad77ab32c879ff3108f9900302ea545ea38789659f9557c3b350ebcecd542aca5fe86e87d17b61faf65cf6591d2945416a5850cec001a33f7ef062f03d0256fd7f9973bed70952d7f356d5045da1f53f9eb733a107375a663dce68b1bc02cb0ed1438eff656ad957f609c764e8607491f4739c10fc6c98d1f3a48b3c246667c0b2d1c937c2de5f7a0fc94cee8e5c9793cd014d618d5892312b59f1d9274ab4447cdbfd7310e5ed8558ef52f7f9d4b4d3113a03962e485f3ef2d787f8fa9680e99c590436870e0b2a84068b2afc58b7ece58a0d281bcd017f2b528982f2f45ae2c12d022b00ac4c04e5e513cbee1c815bd9d7060b20db3b1e65a16e5a6622e7d7171b55a2af564b2f57e1f994412dbbd4c3ddb6d44f408364235e5b1a4e692a9ef19e0537cc0728e7e4189767036250a5df2b35b8fb82ce4c49de7e24b22997dfd4ff0eeea87a220a7423810c1b62f07f91906eb5bcf0370fddda8b5896af19360e73c825f21355730c7ccb487e040937249b00dce51e85cebc10952f8f5ae461a806beab596a212708c8986e08e0d70e684a1f6ee3bfde285338dc3d514bb859762d59edc675b2330cd2482b57e76675df84879ffca6886ad0cb9b08954616cbac42e345a31c8ee62f6201ed61665abf4a0a7f0de67403d1e0e99aa16bbc2c6866243e9b7a9d28de97863fb73cf6365609e27994987c8519c39dd5403b929fc213de1773c0469423ab395496035ea80b3bf616d12949b223aabcbe6d87ac7c32846d8865f18cf23d87d0a8b93711ca5a3ed87636f10b3738fdd38c37eda41869e5f9fa48372f752c0078c9ec42660bf4ed8c2aadff0f3a61dfee9d05be5c39adf74cc3273fac313ff97ddd9e32fb0dccbd97e967cb59d718d3f84b98aca8de591f9322e24847098c2bb279b248c4ac5eba08c58ead0c99a0176bb8c5605fde46a7ec08f6683687d18f383d39ef567b4700b9de512520dbe0017594043e12e647b95e83fcfad60e8e649820737919e81b3f4853efb24bfe728abaae3653d9270d81134241dc45fe039b3dc828fe035ff969a395cbe41cce5428996f6701f13ab321f7658a8a8601de092685df14e065b10c177435bc2f75970b33225f3c84483464303caddf3474363a25d7aac64f8951cc81959422f2fc2d900153abbd92048b87310386e33d002d2e019f6a546efff240ec052b23624ddadd7ed3200f3a4d2300333eda044a2e9243c982ee337a210d8bae111277c310649e54882bf76d89ff5ab2cfa56ef431bb216b5f4efafd4ead74554c2e651693535a99e72bdbe0a4714dc8e77df8cf171dd3a877c42860df7fe70691b5f6af3665bc1a90d3d9088c89cac8dfc0748a93e86cdcbe0208375a1ae2ca2b690b8094ca9f09c7afde6d7b8011fde3bd49e362f73b1318a7172ae79f57a07225f1ba7e514c777b1964a65cc616c3916c31a64fcb2670c4b74e68670a37b987523102e0d2a9943f2b253bac11f3ef5d27523b0594f91d1093b58733924ed34e1321d306652fd4c74366e2b7ff85fb2d10315bd193a3dfc89091e3e80e7e00d59bf36856c3bb0341cafcf42103d0585fc571b795f9142204d68eb745891927045813c66dd95ef2370a9abfaca57b0414029f6a009835470dcf4db1c7c8d7c0f9b0a0a63d2f8ebda33cf3136724a77e9d735dea4293dc24763991e7d581fd7866e67d3330e70c70be3620621ec6bcba3dd16227ef3fd389b8c3ced6c54a11a430ab1a4b9377d0a8656aaad69079ae05ac73b0150cb07d08bc10747abc3588d77c80b9e3838a62f3e87906f5718f7b50a6ea6c799c0d8989a16a7feffd5d7ff524b68d1d965130ba74f2da34b02068cba682383f81557aca17a8350d46db5a57cf1f6340bd805fa743647cdc94c4a581152a691fe6a1a2e7fdc546b6ec21a32bb7112cffa00a3d0336ca81dc9719f5d38b5011f5466fea40e266bb62a53d2b549e1bf4e74e912c4671415ac6fba9c945c4d39c880ca7ff26ad0d5a1401793710a837059b8790a998e2bb51424d5f09db47dcfdb0d35b312e2807abe305a800aca9c0e59bb51002af548563df0ad5b53c426b20abd584b08f6ee1a0417f9a74cdcca594828c8d846bb5a03158d6100ce159af9f5bf6c4e32ff75057f97404cefa34119a4378675a643487f118fc09fe6055755fc1016722dac810d9d66558961d06ad8992ef48281a5d8a630c79b8265fb5993120f5f32dfecc7d3a344f92fa9434a202dcfa205f3279e615a09d58d93e1518f2c637f8a3684e6a9f646bec7517b716e4e77123191e01627ba38d02e53487f8b77cbac67af1ca7522f8e6ded38d35cc62f2d7e004196c07a25774a91c887be0570a8c47be4cea26d89e594a8d0768e6b6a2ed2c7cc67a13e0021397745420d982d73f2b60622984af4940cb5fdf774b4554749e6e72f924fbdcf6d60060721b788b94d9421775d34cb96823fcc98456219e752476f799f9914cf6fa9e88c06c1f951ac1c4922af3620911ade0f6a1fa45cc8b8572866cea63bf1e2b836c7d820bdce7449bd09dc67fc6aaf9726546d2a890b80dd7d100e872e89d2202d3ee78c578d2b2d1d0ee1c5138469b6c570adfd4d498c69b83597743caadfda8a707e4c71f9d77291b42fe60c1e6163045cecefc86509aec9be1455010f3d74d2bf2139070f4faacca78715268f0fcf809fb05064dcdfb80eff494a9d3294f9a7a1f7dfbe45842ba2bc19114e932cef0db97df21149adbfef1a157036d62fedb9231d2069d4480046a9bb0cacc23b6b32b654dd922e17c3ea72cbb51466346aeeb2f99309bc46edf40e9a487a10a122a9e8c7702c72cb11fc358d09a48532179c1ad20ee2e36745b23f4f41da2c63e0b46cfd6079725c45ab75d7c35bf681b7938d39fab1927bcb3aa9e08dd79672ec83d2d632dc0fcf9f3e05601a57a9c6025b4c0777e7e15789d36c2a139f27311efdf7972fb5206671e87812f652748437cb5f69a3bdb997bf692e3b160c7df6ce7dcc8a2383f86e7db5da334075ccbd48695cb2e900ded7365a4accb2bc56989f453c98ba67fc92d14fa44eb7dcc21275cbd933c260c30ebfa4d5d2ec8f97613d3cf2c224af604a7853411d741a2420c0d05e48aa5691d3e443d5c40bb6f59d80682b926c977c06dae15cd075447cf18fb4b241cba93f95c7df91c5fa4481536d3e4a7828c188bc8884b588bfbfc4a16aa968ed3719f1edb0df9fa217ee382d038e2a853c3db5aa33ac537e506214a3a822c2042ad46c29626843c0cc5767ab7fae07418f42fb7963faccf99e5c44f679f4a58a5eeb29a4f0169b3a2bb0dae9929ba1af205e3a29c60272063fe20ed119ab04b99080613cb09497af32886d5393a1eb04c66b7511c02637d57608ee352d9555ec48f1f8412b8791412fab2463e39dd6873bf581bb554769d2fa3b8e77c5dd2cc8ef489329b0e03169613c4578d8e679d7800bec2dc7f53b4a0f976e71ecaebb3f331e86d3db2c82272a927b88251dbd4e100f5f3f9da2582bc51af469704089649a7ce727d2826971f705544c712e6402a5a888f7a3c629dc632dd87bfa0e352a376e45b35f449ec6d753ecb4ae23275afe80c6b0ddcaf50fd9ed1d25e726ac4bef1186b5f0dc68602b139d80d65f77a09758eb2f13d533f9d4328cd29a31a79b4b4b89e86d72951573aefe67a061bb15b7d1b73ba026a4a4deb0e2f285ac6daf9203c67fdb0652b3e06b46ee8685a8653203dda6e8256c5b0a290a25e621dbe6b659e7414b6906c4ac0c7bdab9ff6b87c857c0977f31e7ab98d97126bf30a44d6f1c4c0a8ec2717c71226cad75bd745b7e0faf041228f328bcd6c07c4337501c943aa3ac96f53052568c8e3deeb838dec32b8c0488b560c39df750c4f182cfa74eeee7969ae76e0ae71cb394afacd844cb960eb97777d1214db917ca174b62276269b6489b7999166bfa8e16b8edd05ada98b8bd07a06212e0fb74ac850d6bd1b18f54abf4b28f00c6ce8b9e8d12b818e26b1761974daddda4a8042c3488a14349d7eeb20fa59a2e3d5586f910e5aad05cd308116d22fb55d5374f6811084ff22ea8be671a3fc9bb9317dee680b031a9ec47aef92c2f84a215f50eef11498ad33a9f2d3f0e2ce538b372d489d3ed636a28b1d24b3b1862a521f103f5ce5e89ca72f2fcb0ae1a6c135c73c303c260e0c4aca945120d01c8b05f80f486587a7605dcdf4c5f99aad826b02a29541e2f3c16880a4b63d2cdcba65b44c2bbd244a480cfbb6cb88b1af68f6ec15b3461c7090b9ccfaa3cdd04b9694676937971db74c88c5ec0be9aa8e1325d9332efb09022e2334f967e3dd7c3a8adda6b7ac4732c0478606b94ea89c78ca45c8399ca425b7ce110cff14d4dde541bbb38fbdf16765395ca93eae300bea4e2f9f4755b988b47ebd2ce92793882fe5b16d081084510e13ea28767550be8d2a8c1ecfe8c38634d73f5599b310f4ea2a9b03dc60c2dfc20bb73fd9ed6948fb0b5b375e54e88e9222b26ce41154225ba6b3f446fbb7b88aeb6b29a40bdd02ed6532059a3568a74419b292d9cd753bf4bc43f6549b02f0f72c8732921185fb4a91ca56e7b0b01e0a908b98635850505e34fbb4f1075f915f270704b97cdd99178b3d71e7bbb3ecb6dd88f53ece973c68f69dfe81a6406157828e8da39fe4f802b8cb3230936e637f3d83c63d2e78dd19e091d0f762700acb61cd6fb2d736d2a19353b175a33fd51ef2f0465f4494a4c6483f520741b99eaaa6bc8a76ad9bc57c570ce4fe7a7b75a42e9a3830a62b4210c5efac30bc1bdbfeeb0a21a6a0b134eedf8ea2c886ed89fea7af75f8e07b7", 0x1000}, {&(0x7f0000002180)="1c6e710cf70a14ddc8a04d4ec1101571354fcad8c546df8cd3d494ec84713358b9e0a96df0cb33f91ad8dde6b070630ff2385554654ce581bec30762b826030da3896aaca57da2e95a9047dba00f5262a225e6f9e1d9fcba766c55509d02ca9e2b9480c596d41a4836f995616b3db855244423fdd8643ea443bb86b0307eb36ab7ccedd945093e5fd4400206558722032ce3aa7a45cac2216dfbe73ac700e0ab81397b83adeb14d2259bfc7cbfb381c833722ea5631735c0683acefa3f14865df7f7ea9ed87d21ab9cbcf10e40", 0xcd}, {&(0x7f0000002280)="de29823c24a586791505856f93259d3c0448c0c31c80e7a1a9611db343e77f9f91e9749ce3a0", 0x26}], 0x4, &(0x7f0000002300)={0x78, 0xff, 0x7, "f1fc9bdc174be68b4a17cf44c22551b639b46774ec25adbaee9a2c152bd0a9312ee14f18dba91fbdb895aa29542c4c2f3b42f937b705c7ac521668aecc7ae073409a64478b87092619124b8acec5faa115a310f3f19843f6c2572a42b9039f683213f60294"}, 0x78, 0x4000841}, {&(0x7f0000002380)={0x27, 0x0, 0xffffffffffffffff, 0x2, 0x7, 0x2, "1af03e837857de06d1d3c35a23784d86a4688c701755c5a04b61687593da8ab793354a8f1447ef701c861afd457c6357f4ce595a210182a2033c1743e727ba", 0x23}, 0x60, &(0x7f00000024c0)=[{&(0x7f0000002400)="296a4555b1fe89a665d4d043990ff88d88529dcd6f544f04d4f0bfb2515f0d7ea6fa0f5923047c48ab84e1f19daf0811744999bdc9397494c46de9f138dfbe98ee4d8a0c1cb0dad5946334c7b746c6d2d29e12dfb5cd1894abf2f286fa1f91d9e63c92027e2d2a206db7b7884ff058f0f902e7e8591f32b7656556a6b6a769e2193a4fc183e7982dd1301458eb346bae0dae24d1b939914584673fb4ee526a41f859d58f67444c01c75b13a5715ebd7ed3d4", 0xb2}], 0x1, 0x0, 0x0, 0x8004}], 0x6, 0x0)
ioctl$sock_bt_bnep_BNEPCONNADD(r3, 0x400442c8, &(0x7f0000000180)=ANY=[@ANYRESHEX=r3, @ANYBLOB="68c28000fa7fc1be0ca234b94e8ad889a6b4bfb8c52e83697d6e55ac83930a9e6099fc034ceeb3bdb18a34c2505e0e1fcb027fd750d82f9bffc375b0cf5402becfe29912287bb007ddd9e1d0fe25ec06afc65900"])
sendmsg$nl_route(r2, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000200)=ANY=[@ANYRES64=r0, @ANYRES16=r1, @ANYRES8=0x0, @ANYRES16=r4], 0x44}}, 0x4000)
connect$qrtr(r1, &(0x7f0000000140)={0x2a, 0xffffffff, 0x8000}, 0xc)

661.682966ms ago: executing program 4 (id=3691):
pipe(&(0x7f0000000040)={<r0=>0xffffffffffffffff, <r1=>0xffffffffffffffff}) (async)
socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000080)={<r2=>0xffffffffffffffff})
splice(r2, 0x0, r1, 0x0, 0x10000008ebc, 0x0)
bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x7, 0xc, &(0x7f0000000440)=ANY=[], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x2, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94)
ioctl$OCFS2_IOC_GROUP_ADD64(r1, 0x40186f03, &(0x7f0000000000)={0x7, 0x8, 0x5, 0xeebf})
r3 = bpf$MAP_CREATE(0x0, &(0x7f0000000740)=ANY=[@ANYBLOB="0b00000005000000000400000900000001"], 0x48) (async)
bpf$PROG_LOAD(0x5, &(0x7f0000000580)={0xa, 0x4, &(0x7f0000000480)=ANY=[@ANYBLOB="18000000000000000000000000000000850000006d"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) (async, rerun: 32)
r4 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000d80)={0x18, 0x5, &(0x7f0000000480)=ANY=[@ANYBLOB="1801000021"], 0x0, 0x40, 0x0, 0x0, 0x0, 0xb4a02fe0ce239f93, '\x00', 0x0, 0x2}, 0x94) (rerun: 32)
bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0xe, 0x0, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000800000000000000000000018110000", @ANYRES32=r3], 0x0, 0x0, 0x0, 0x0, 0x41100, 0x59, '\x00', 0x0, @fallback=0x2a, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff, r4, 0x0, 0x0, 0x0, 0x0}, 0x94)
r5 = bpf$PROG_LOAD(0x5, &(0x7f0000000300)={0x6, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x41100, 0x0, '\x00', 0x0, @fallback=0x4, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) (async)
ppoll(0x0, 0x0, &(0x7f0000000200)={0x0, 0x3938700}, 0x0, 0x0) (async)
mmap(&(0x7f0000000000/0x400000)=nil, 0x400000, 0x0, 0xc3072, 0xffffffffffffffff, 0x0)
bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000180)={r5, 0x2000000, 0xe, 0x0, &(0x7f0000000040)="630b008646dc3f0adf33c9f7b986", 0x0, 0xcf25, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, 0x0, 0x80}, 0x50)
openat$cgroup_ro(r0, 0x0, 0x0, 0x0) (async)
r6 = socket$nl_netfilter(0x10, 0x3, 0xc)
sendmsg$IPSET_CMD_CREATE(r6, &(0x7f0000000100)={0x0, 0x3, &(0x7f00000000c0)={&(0x7f0000000140)=ANY=[@ANYBLOB="5c0000000206030000000000000000000000000005000100070000000900020073797a31000000001400078005001500070000000800124000000000050005000a00000005000400000000000d000300686173683a6e6574"], 0x5c}}, 0x0)

459.556782ms ago: executing program 3 (id=3692):
r0 = socket$nl_generic(0x10, 0x3, 0x10)
r1 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000240), 0xffffffffffffffff)
sendmsg$NL80211_CMD_REQ_SET_REG(r0, &(0x7f0000000300)={0x0, 0x0, &(0x7f00000002c0)={&(0x7f0000000280)={0x14, r1, 0x100, 0x70bd2b, 0x25dfdbff}, 0x14}, 0x1, 0x0, 0x0, 0x80}, 0x8840)

390.673815ms ago: executing program 2 (id=3694):
r0 = socket(0x11, 0x3, 0x0)
ioctl$sock_SIOCGIFINDEX(r0, 0x8933, &(0x7f00000005c0)={'gre0\x00', <r1=>0x0})
bind$packet(r0, &(0x7f00000001c0)={0x11, 0x0, r1}, 0x14)
setsockopt$packet_int(r0, 0x107, 0xf, &(0x7f0000000240)=0xe9, 0x4)
setsockopt$packet_int(r0, 0x107, 0x14, &(0x7f0000000040)=0x93bd, 0x4)
sendmsg$netlink(r0, &(0x7f0000002ac0)={0x0, 0x0, &(0x7f0000002100)=[{&(0x7f0000000440)=ANY=[@ANYBLOB="0201140084dc18000e1a80009f0001852900002f0600ac141430e0000001808a8972bd0b72e41082b1a3d206"], 0xdd12}], 0x1, 0x0, 0x0, 0x30008803}, 0x44040)
r2 = openat$tun(0xffffffffffffff9c, &(0x7f0000000240), 0x0, 0x0)
ioctl$TUNSETIFF(r2, 0x400454ca, &(0x7f0000000040)={'syzkaller0\x00', 0x7101})
r3 = openat$tun(0xffffffffffffff9c, &(0x7f0000000400), 0x0, 0x0)
close(r3)
recvmmsg(r0, &(0x7f0000000980)=[{{&(0x7f0000000480)=@l2tp={0x2, 0x0, @broadcast}, 0x80, &(0x7f0000000740)=[{&(0x7f0000000500)=""/39, 0x27}, {&(0x7f0000000640)=""/230, 0xe6}], 0x2}, 0x93d}, {{0x0, 0x0, &(0x7f0000000940)=[{&(0x7f0000000780)=""/11, 0xb}, {&(0x7f00000007c0)=""/200, 0xc8}, {&(0x7f00000008c0)=""/89, 0x59}], 0x3}, 0x7}], 0x2, 0x140, &(0x7f0000000a00))
r4 = socket(0x10, 0x803, 0x0)
ioctl$sock_SIOCGIFINDEX(r4, 0x8933, &(0x7f0000000100)={'syzkaller0\x00', <r5=>0x0})
sendmsg$nl_route_sched(r4, &(0x7f00000012c0)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000a40)=@newqdisc={0x2c, 0x24, 0x4ee4e6a52ff5653f, 0x70bd2d, 0x25dfdbfc, {0x0, 0x0, 0x0, r5, {0x0, 0x9}, {0xffff, 0xffff}, {0x1}}, [@qdisc_kind_options=@q_drr={0x8}]}, 0x2c}, 0x1, 0x0, 0x0, 0x81}, 0x0)
socket$nl_route(0x10, 0x3, 0x0)
ioctl$SIOCSIFHWADDR(r3, 0x8914, &(0x7f0000002280)={'syzkaller0\x00', @multicast})
bpf$BPF_MAP_CONST_STR_FREEZE(0x16, &(0x7f00000000c0)={0xffffffffffffffff, <r6=>0xffffffffffffffff}, 0x4)
bpf$BPF_MAP_CONST_STR_FREEZE(0x16, &(0x7f00000003c0)={r6}, 0x4)
r7 = socket(0x400000000010, 0x3, 0x0)
ioctl$BTRFS_IOC_GET_FEATURES(r3, 0x80189439, &(0x7f0000000080))
ioctl$sock_SIOCGIFINDEX(r7, 0x8933, &(0x7f0000000380)={'syzkaller0\x00', <r8=>0x0})
sendmsg$nl_route_sched(r7, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000180)={&(0x7f00000002c0)=@newtfilter={0x94, 0x2c, 0xd27, 0x170bd2c, 0x2, {0x0, 0x0, 0x0, r8, {0x0, 0x10}, {}, {0x8, 0xffe0}}, [@filter_kind_options=@f_flow={{0x9}, {0x64, 0x2, [@TCA_FLOW_MODE={0x8, 0x2, 0x1}, @TCA_FLOW_KEYS={0x8, 0x1, 0x1a2a1}, @TCA_FLOW_ACT={0x50, 0x9, 0x0, 0x1, [@m_csum={0x4c, 0x1, 0x0, 0x0, {{0x9}, {0x20, 0x2, 0x0, 0x1, [@TCA_CSUM_PARMS={0x1c, 0x1, {{0xd, 0x401, 0x6, 0x800, 0x6}, 0x77}}]}, {0x4}, {0xc, 0x7, {0x0, 0x1}}, {0xc, 0x8, {0x1, 0x1}}}}]}]}}]}, 0x94}, 0x1, 0x0, 0x0, 0x4894}, 0x2)
r9 = bpf$MAP_CREATE(0x0, &(0x7f0000000440)=@bloom_filter={0x1e, 0x0, 0xca, 0x3, 0x0, 0x1}, 0x50)
bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f00000004c0)={0x1d, 0xf, &(0x7f0000000000)=@ringbuf={{0x18, 0x2}, {{0x18, 0x1, 0x1, 0x0, r9}, {0x7, 0x0, 0x2}, {}, {0x85, 0x0, 0x0, 0x9f}}, {}, [], {{}, {}, {0x85, 0x0, 0x0, 0x6c}}}, &(0x7f0000000200)='GPL\x00'}, 0x90)
r10 = socket$kcm(0x11, 0x3, 0x0)
setsockopt$sock_attach_bpf(r10, 0x107, 0xf, &(0x7f0000000600), 0x56)
sendmsg$kcm(r10, &(0x7f0000000280)={&(0x7f0000000540)=@xdp={0x2c, 0x0, r8, 0x42}, 0x80, &(0x7f0000000440)=[{&(0x7f00000001c0)="27030200dc0f14000e0000000024c1021200ff8807c2fb7fe0406e52534b4f6b3d327db412f40000000000000000", 0x2e}], 0x1}, 0x4005)

324.42835ms ago: executing program 4 (id=3695):
bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000340)={0x1f, 0x10, &(0x7f0000000040)=ANY=[@ANYBLOB="1800000005000000000000008000000018110000", @ANYRES32=<r0=>0xffffffffffffffff, @ANYBLOB="0000000000000000b702"], 0x0, 0x0, 0x0, 0x0, 0x41100, 0x11}, 0x94)
r1 = socket$nl_generic(0x10, 0x3, 0x10)
r2 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000a00), 0xffffffffffffffff)
ioctl$sock_SIOCGIFINDEX_80211(r1, 0x8933, &(0x7f0000000480)={'wlan1\x00', <r3=>0x0})
sendmsg$NL80211_CMD_SET_WIPHY(0xffffffffffffffff, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000000)=ANY=[@ANYBLOB='$\x00\x00\x00', @ANYRES16=r2, @ANYBLOB="000425bd7000fcdbdf040200010008003f0036000000080061", @ANYRESHEX=r0], 0x24}, 0x1, 0x0, 0x0, 0x4008001}, 0x20000000)
sendmsg$NL80211_CMD_SET_COALESCE(r1, &(0x7f0000000200)={0x0, 0xffffffffffffff8c, &(0x7f0000000b00)={&(0x7f0000000040)={0x28, r2, 0x1, 0x0, 0x0, {{0x2}, {@val={0x8, 0x3, r3}, @void}}}, 0x28}}, 0x0)

173.243839ms ago: executing program 2 (id=3696):
r0 = socket(0x10, 0x3, 0x0)
sendmsg$TIPC_NL_LINK_SET(0xffffffffffffffff, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000340)={&(0x7f0000000140)=ANY=[], 0x50}}, 0x0)
sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000100)={&(0x7f00000001c0)=ANY=[@ANYBLOB="240000001d00070f000000000000000007"], 0x24}}, 0x0)
sendmmsg(r0, &(0x7f0000000000), 0x4000000000001f2, 0x0)
syz_emit_ethernet(0x2e, &(0x7f0000000000)={@multicast, @dev={'\xaa\xaa\xaa\xaa\xaa', 0x20}, @val={@void, {0x8100, 0x7, 0x1, 0x1}}, {@arp={0x806, @ether_ipv4={0x1, 0x800, 0x6, 0x4, 0x1, @broadcast, @local, @random="c79094b15e35", @local}}}}, 0x0)

160.658545ms ago: executing program 2 (id=3697):
r0 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000380)='memory.events\x00', 0x275a, 0x0)
r1 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000140)='memory.events\x00', 0x7a05, 0x1700)
r2 = socket$nl_route(0x10, 0x3, 0x0)
r3 = socket$nl_netfilter(0x10, 0x3, 0xc)
sendmsg$NFT_BATCH(r3, &(0x7f0000002c80)={0x0, 0x0, &(0x7f0000002c40)={&(0x7f0000003180)=ANY=[@ANYBLOB="140000001000010000000000000000000000000a28000000000a01080000e0030000000e02000000090001007300803000000000080002400000000214000000110001"], 0x50}}, 0x0)
r4 = socket$nl_netfilter(0x10, 0x3, 0xc)
sendmsg$NFT_BATCH(r4, &(0x7f000000c2c0)={0x0, 0x0, &(0x7f0000000200)={&(0x7f00000003c0)=ANY=[@ANYBLOB="140000001000010000000000000000001c6a000a28000000000a0101000000005e1affd5020000000900010073797a300000000008000240000000032c000000030a01030000e6ff00000000020000000900010073797a30000000000900030073797a320000000014000000110001"], 0x7c}}, 0x0)
sendmsg$NFT_MSG_GETSET(r3, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000480)=ANY=[@ANYBLOB="200000000a0a01020000000000000000020000000900010073"], 0x20}}, 0x4000000)
sendmsg$nl_route(r2, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000100)={&(0x7f0000000080)=ANY=[@ANYBLOB="940000001000010400"/20, @ANYRES32=0x0, @ANYBLOB="0300000000000000640012800b000100697036677265000054", @ANYRES32], 0x94}}, 0x0)
pwritev(r1, &(0x7f0000000000)=[{&(0x7f0000000040)="8e", 0x1}], 0x1, 0x8001, 0x80)
sendfile(r1, r0, 0x0, 0xf03a0005)
ioctl$BTRFS_IOC_RM_DEV(0xffffffffffffffff, 0x5000940b, &(0x7f00000003c0)={{r0}, "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"})

101.426034ms ago: executing program 2 (id=3698):
r0 = bpf$MAP_CREATE(0x0, &(0x7f0000000040)=@base={0x19, 0x4, 0x8, 0x8}, 0x50) (async)
r1 = socket$nl_route(0x10, 0x3, 0x0)
sendmsg$nl_route(r1, &(0x7f0000000000)={0x0, 0xf, &(0x7f0000000780)={&(0x7f00000000c0)=@ipv4_newroute={0x38, 0x18, 0x35f32a6dfa748ddd, 0x0, 0x0, {0x2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x6}, [@RTA_ENCAP_TYPE={0x6, 0x15, 0x5}, @RTA_ENCAP={0x14, 0x16, 0x0, 0x1, @LWTUNNEL_IP_OPTS={0x4, 0x8, 0x0, 0x1, @LWTUNNEL_IP_OPTS_GENEVE={0x4, 0x1, 0x0, 0x1, @LWTUNNEL_IP_OPT_GENEVE_DATA={0x0, 0x3, "45f03ddbd8aa8987fe6255b1f0ce25722d4fbc3e175fdc7e099d8e96fb9e1684b3ce5ba5138c0597ab9dbe76c14ef51028ce0cbae0c1f2a920ddddc3faa3406091ba1969da904569a5ef5112d5b196a9c9326e7d3812d3d5ea0aa140"}}}}]}, 0x38}}, 0x0) (async)
r2 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x6, 0xd, &(0x7f0000000200)=ANY=[@ANYBLOB="1800000000000000000000000000000085000000a000000018110000", @ANYRES32=r0, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bca2000000000000a6020000f8ffffffb703000003000000b704000000000400850000003300000095"], &(0x7f0000000180)='GPL\x00', 0x0, 0x0, 0x0, 0x40f00, 0x0, '\x00', 0x0, @xdp, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94)
bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000600)={r2, 0x5, 0xe, 0x0, &(0x7f0000000000)="aaf3a4cd08258cebe46db996738b", 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, 0x0, 0x2}, 0x50)

9.245257ms ago: executing program 2 (id=3699):
r0 = socket$nl_netfilter(0x10, 0x3, 0xc)
r1 = socket$inet_tcp(0x2, 0x1, 0x0)
syz_emit_ethernet(0x16, &(0x7f0000000340)={@broadcast, @remote, @val, {@generic={0x88fb}}}, 0x0)
getsockopt$inet_tcp_buf(r1, 0x6, 0x15, 0x0, &(0x7f0000000100))
sendmsg$IPSET_CMD_CREATE(r0, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000140)={0x60, 0x2, 0x6, 0x101, 0x0, 0x0, {0x1}, [@IPSET_ATTR_TYPENAME={0x10, 0x3, 'hash:ip,mac\x00'}, @IPSET_ATTR_SETNAME={0x9, 0x2, 'syz2\x00'}, @IPSET_ATTR_DATA={0xc, 0x7, 0x0, 0x1, [@IPSET_ATTR_CADT_FLAGS={0x8, 0x8, 0x1, 0x0, 0x51}]}, @IPSET_ATTR_FAMILY={0x5, 0x5, 0x2}, @IPSET_ATTR_PROTOCOL={0x5, 0x1, 0x6}, @IPSET_ATTR_TYPENAME={0x11, 0x3, 'hash:net,net\x00'}]}, 0x60}}, 0x10)

0s ago: executing program 2 (id=3700):
sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000180)={&(0x7f00000002c0)=@newtfilter={0x24, 0x2c, 0xd27, 0x70bd25, 0x2, {0x0, 0x0, 0x0, 0x0, {0x0, 0xffff}, {}, {0x8, 0x4}}}, 0x24}, 0x1, 0x0, 0x0, 0x4004000}, 0x0)
socket(0x2000000000000021, 0x2, 0x10000000000002)
r0 = socket$inet_udp(0x2, 0x2, 0x0)
ioctl$sock_ipv4_tunnel_SIOCADDTUNNEL(r0, 0x89f1, &(0x7f0000000440)={'sit0\x00', &(0x7f0000000400)={'syztnl0\x00', <r1=>0x0, 0x0, 0x0, 0x5, 0x0, {{0x5, 0x4, 0x0, 0x0, 0x14, 0x0, 0x0, 0xd1, 0x0, 0x0, @multicast2, @broadcast}}}})
r2 = openat$tun(0xffffffffffffff9c, &(0x7f0000000000), 0x40241, 0x0)
ioctl$TUNSETIFF(r2, 0x400454ca, &(0x7f0000000200)={'syzkaller1\x00', 0xc201})
r3 = socket$kcm(0x2, 0xa, 0x2)
ioctl$SIOCSIFHWADDR(r3, 0x8914, &(0x7f0000000180)={'syzkaller1\x00', @link_local={0x1, 0x80, 0xc2, 0x0, 0x0, 0xe}})
write$tun(r2, &(0x7f0000000440)=ANY=[@ANYBLOB="000086dd0001110004000000a60c6eec00be00442fd3fe8000000000000000000000000000aaff020000000000000000000000000001042088be"], 0xfdef)
syz_genetlink_get_family_id$ethtool(&(0x7f0000000000), 0xffffffffffffffff)
r4 = socket(0x2, 0x80805, 0x0)
getsockopt$inet_sctp_SCTP_GET_ASSOC_ID_LIST(r4, 0x84, 0x1d, &(0x7f0000000000)={0x1, [<r5=>0x0]}, &(0x7f0000000040)=0x8)
r6 = socket$netlink(0x10, 0x3, 0x0)
openat$cgroup_ro(0xffffffffffffff9c, 0x0, 0x275a, 0x0)
r7 = socket(0x10, 0x803, 0x0)
sendmsg$IPVS_CMD_SET_INFO(r7, &(0x7f0000000b00)={0x0, 0x0, &(0x7f0000000ac0)={&(0x7f0000000a80)={0x14}, 0x14}}, 0x0)
getsockname$packet(r7, &(0x7f0000000100)={0x11, 0x0, <r8=>0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0x14)
r9 = socket$nl_route(0x10, 0x3, 0x0)
sendmsg$nl_route(r9, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000380)=ANY=[@ANYBLOB="3c0000001000850600"/20, @ANYRES32=r8, @ANYBLOB="01000000020000001c0012000c000100626f6e64000000000c0002"], 0x3c}}, 0x0)
r10 = socket$nl_route(0x10, 0x3, 0x0)
r11 = socket(0x1, 0x803, 0x0)
getsockname$packet(r11, &(0x7f0000000100)={0x11, 0x0, <r12=>0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f00000001c0)=0x14)
sendmsg$nl_route(r10, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000200)=@newlink={0x3c, 0x10, 0x403, 0x78bd28, 0x0, {0x0, 0x0, 0x0, 0x0, 0x90646}, [@IFLA_LINKINFO={0x14, 0x12, 0x0, 0x1, @macvtap={{0xc}, {0x4}}}, @IFLA_LINK={0x8, 0x5, r12}]}, 0x3c}, 0x1, 0x0, 0x0, 0x600}, 0x0)
sendmsg$nl_route(r6, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000300)={&(0x7f0000000580)=@newlink={0x40, 0x10, 0xffffff1f, 0x0, 0x80, {0x0, 0x0, 0x0, 0x0, 0x0, 0x3f00}, [@IFLA_LINKINFO={0x18, 0x12, 0x0, 0x1, @vti={{0x8}, {0xc, 0x2, 0x0, 0x1, [@IFLA_VTI_REMOTE={0x8, 0x5, @remote}]}}}, @IFLA_MASTER={0x8, 0xa, r8}]}, 0x40}, 0x1, 0x0, 0x0, 0x2000c0c1}, 0x40000)
ioctl$FS_IOC_MEASURE_VERITY(r0, 0xc0046686, &(0x7f0000000340)={0xac469b81ec3d7621, 0x45, "148b1dd259581a930d47a4854138bd27d68a0beeaa905cb8676abcb7559d972bacaf3713dc5c6c39cf8a79a9a9eb1ed2886d81faed76b33e68027cce4772e8c18b3af218cf"})
ioctl$SIOCSIFHWADDR(r2, 0x8924, &(0x7f0000000240)={'nicvf0\x00', @local})
r13 = socket$inet6_sctp(0xa, 0x5, 0x84)
r14 = openat$tun(0xffffffffffffff9c, &(0x7f0000000280), 0x307000, 0x0)
ioctl$TUNSETIFINDEX(r14, 0x400454da, &(0x7f0000000300)=r1)
getsockopt$inet_sctp6_SCTP_GET_PEER_ADDRS(r13, 0x84, 0x6c, &(0x7f0000000540)={r5}, &(0x7f0000000640)=0x8)

kernel console output (not intermixed with test programs):

ode
[  304.172337][T13131] C: renamed from lo
[  304.221005][T13131] A link change request failed with some changes committed already. Interface C may have been left with an inconsistent configuration, please check.
[  304.313809][ T9391] ip6_tunnel: ip6gre2 xmit: Local address not yet configured!
[  304.354614][ T5722] ip6_tunnel: ip6gre2 xmit: Local address not yet configured!
[  304.364626][ T9391] ip6_tunnel: ip6gre2 xmit: Local address not yet configured!
[  304.396317][T13149] netlink: 20 bytes leftover after parsing attributes in process `syz.4.1929'.
[  304.440139][T13152] netlink: 8 bytes leftover after parsing attributes in process `syz.1.1930'.
[  304.486445][T13159] netlink: 'syz.0.1932': attribute type 17 has an invalid length.
[  304.491737][T13155] netlink: 20 bytes leftover after parsing attributes in process `syz.4.1929'.
[  304.534201][T13159] netlink: 4 bytes leftover after parsing attributes in process `syz.0.1932'.
[  304.538138][T13149] netlink: 'syz.4.1929': attribute type 1 has an invalid length.
[  304.583587][T13160] syzkaller0: entered promiscuous mode
[  304.590832][T13159] netlink: 28 bytes leftover after parsing attributes in process `syz.0.1932'.
[  304.609311][T13160] syzkaller0: entered allmulticast mode
[  304.625238][T13165] netlink: 'syz.0.1932': attribute type 17 has an invalid length.
[  304.688106][T13165] netlink: 4 bytes leftover after parsing attributes in process `syz.0.1932'.
[  304.769051][T13159] erspan0: entered promiscuous mode
[  304.794819][T13159] erspan0: left promiscuous mode
[  304.824561][ T5722] ip6_tunnel: ip6gre2 xmit: Local address not yet configured!
[  304.838123][T13169] veth0_macvtap: Caught tx_queue_len zero misconfig
[  304.869594][T13165] erspan0: entered promiscuous mode
[  304.880897][T13165] erspan0: left promiscuous mode
[  304.901479][T13174] netlink: 'syz.1.1934': attribute type 1 has an invalid length.
[  304.914867][T13174] netlink: 'syz.1.1934': attribute type 1 has an invalid length.
[  304.922718][T13174] netlink: 'syz.1.1934': attribute type 1 has an invalid length.
[  304.930685][T13174] netlink: 'syz.1.1934': attribute type 1 has an invalid length.
[  304.974192][ T5285] veth0_vlan: left promiscuous mode
[  305.090945][ T5722] ip6_tunnel: ip6gre2 xmit: Local address not yet configured!
[  305.984885][ T5815] veth0_vlan: entered promiscuous mode
[  306.121575][T13191] workqueue: Failed to create a rescuer kthread for wq "bond4": -EINTR
[  306.428030][T13227] netlink: 'syz.3.1941': attribute type 5 has an invalid length.
[  306.587378][T13227] geneve2: entered promiscuous mode
[  306.605732][T13227] geneve2: entered allmulticast mode
[  306.635492][   T57] netdevsim netdevsim3 
: set [1, 1] type 2 family 0 port 256 - 0
[  306.660974][   T57] netdevsim netdevsim3 netdevsim1: set [1, 1] type 2 family 0 port 256 - 0
[  306.737561][   T57] netdevsim netdevsim3 netdevsim2: set [1, 1] type 2 family 0 port 256 - 0
[  307.068393][T13250] xt_hashlimit: overflow, try lower: 18446744073709551613/4
[  307.070665][T13257] x_tables: duplicate underflow at hook 1
[  308.399570][T13310] ip6t_REJECT: TCP_RESET illegal for non-tcp
[  308.417986][T13312] __nla_validate_parse: 13 callbacks suppressed
[  308.418003][T13312] netlink: 12 bytes leftover after parsing attributes in process `syz.4.1959'.
[  308.524242][T13317] netlink: 24 bytes leftover after parsing attributes in process `syz.3.1960'.
[  308.744865][T13327] syzkaller0: entered promiscuous mode
[  308.762905][    C0] ip6_tunnel: ip6gre2 xmit: Local address not yet configured!
[  308.774041][T13327] syzkaller0: entered allmulticast mode
[  308.971551][T13327] netlink: 52 bytes leftover after parsing attributes in process `syz.1.1961'.
[  309.067868][T13335] netlink: 24 bytes leftover after parsing attributes in process `syz.4.1962'.
[  309.641644][T13355] netlink: 8 bytes leftover after parsing attributes in process `syz.3.1966'.
[  309.683874][T13353] netlink: 8 bytes leftover after parsing attributes in process `syz.3.1966'.
[  309.730264][T13355] netlink: 48 bytes leftover after parsing attributes in process `syz.3.1966'.
[  309.770703][T13353] netlink: 48 bytes leftover after parsing attributes in process `syz.3.1966'.
[  309.907339][T13362] netlink: 28 bytes leftover after parsing attributes in process `syz.1.1968'.
[  309.967504][T13355] geneve3: entered promiscuous mode
[  310.013853][T13355] geneve3: entered allmulticast mode
[  310.172739][T13368] netlink: 'syz.3.1971': attribute type 7 has an invalid length.
[  310.228739][T13368] netlink: 'syz.3.1971': attribute type 7 has an invalid length.
[  310.559709][T13380] netlink: 420 bytes leftover after parsing attributes in process `syz.2.1974'.
[  310.673476][T13387] netlink: 'syz.4.1976': attribute type 1 has an invalid length.
[  310.694126][T13387] netlink: 'syz.4.1976': attribute type 2 has an invalid length.
[  310.793572][T13384] vlan3: entered allmulticast mode
[  310.830101][T13384] bond0: entered allmulticast mode
[  312.041788][T13427] bond7: (slave bridge6): Enslaving as an active interface with an up link
[  312.496215][T13450] sctp: [Deprecated]: syz.2.1993 (pid 13450) Use of int in maxseg socket option.
[  312.496215][T13450] Use struct sctp_assoc_value instead
[  313.192553][T13464] netlink: 'syz.1.1997': attribute type 1 has an invalid length.
[  313.201280][T13464] netlink: 'syz.1.1997': attribute type 2 has an invalid length.
[  313.981786][T13497] __nla_validate_parse: 2 callbacks suppressed
[  313.981805][T13497] netlink: 8 bytes leftover after parsing attributes in process `syz.4.2008'.
[  314.150684][T13503] lo: entered promiscuous mode
[  314.159490][T13503] gre0: entered promiscuous mode
[  314.186297][T13503] gretap0: entered promiscuous mode
[  314.199121][T13503] ip_vti0: entered promiscuous mode
[  314.428633][T13505] bridge0: port 3(team0) entered disabled state
[  314.436317][T13505] bridge0: port 2(bridge_slave_1) entered disabled state
[  314.444144][T13505] bridge0: port 1(bridge_slave_0) entered disabled state
[  314.966113][T13505] batman_adv: batadv0: Interface deactivated: batadv_slave_0
[  314.996295][T13505] batman_adv: batadv0: Interface deactivated: batadv_slave_1
[  315.112171][T13252] Set syz1 is full, maxelem 65536 reached
[  315.289889][T13533] netlink: 28 bytes leftover after parsing attributes in process `syz.0.2016'.
[  315.314699][T13506] geneve3: entered promiscuous mode
[  315.319926][T13506] geneve3: entered allmulticast mode
[  315.345643][ T9395] netdevsim netdevsim1 netdevsim0: unset [0, 0] type 1 family 0 port 8472 - 0
[  315.382677][ T9395] netdevsim netdevsim1 netdevsim0: unset [1, 0] type 2 family 0 port 6081 - 0
[  315.411567][ T9395] netdevsim netdevsim1 netdevsim0: set [1, 1] type 2 family 0 port 19999 - 0
[  315.421600][ T9395] netdevsim netdevsim1 netdevsim1: unset [0, 0] type 1 family 0 port 8472 - 0
[  315.468240][ T9395] netdevsim netdevsim1 netdevsim1: unset [1, 0] type 2 family 0 port 6081 - 0
[  315.489934][ T9395] netdevsim netdevsim1 netdevsim1: set [1, 1] type 2 family 0 port 19999 - 0
[  315.511008][ T9395] netdevsim netdevsim1 netdevsim2: unset [0, 0] type 1 family 0 port 8472 - 0
[  315.534094][ T9395] netdevsim netdevsim1 netdevsim2: unset [1, 0] type 2 family 0 port 6081 - 0
[  315.555344][ T9395] netdevsim netdevsim1 netdevsim2: set [1, 1] type 2 family 0 port 19999 - 0
[  315.570067][ T9395] netdevsim netdevsim1 netdevsim3: unset [0, 0] type 1 family 0 port 8472 - 0
[  315.581385][ T9395] netdevsim netdevsim1 netdevsim3: unset [1, 0] type 2 family 0 port 6081 - 0
[  315.612117][ T9395] netdevsim netdevsim1 netdevsim3: set [1, 1] type 2 family 0 port 19999 - 0
[  315.732294][T13556] netlink: 52 bytes leftover after parsing attributes in process `syz.4.2021'.
[  315.891944][T13568] netlink: 104 bytes leftover after parsing attributes in process `syz.1.2025'.
[  316.191287][T13583] 8021q: adding VLAN 0 to HW filter on device bond4
[  316.205610][T13583] bridge0: port 4(bond4) entered blocking state
[  316.215469][T13583] bridge0: port 4(bond4) entered disabled state
[  316.221992][T13583] bond4: entered allmulticast mode
[  316.230358][T13594] netlink: 36 bytes leftover after parsing attributes in process `syz.0.2029'.
[  316.243669][T13583] bond4: entered promiscuous mode
[  316.641444][T13621] netlink: 256 bytes leftover after parsing attributes in process `syz.4.2038'.
[  316.663687][T13621] netlink: 256 bytes leftover after parsing attributes in process `syz.4.2038'.
[  316.718420][T13625] xfrm0: entered promiscuous mode
[  316.724238][T13625] xfrm0: entered allmulticast mode
[  316.729553][T13625] team0: Device xfrm0 is of different type
[  316.808697][T13631] netlink: 20 bytes leftover after parsing attributes in process `syz.0.2042'.
[  317.006169][ T1316] ieee802154 phy1 wpan1: encryption failed: -22
[  317.013350][ T1316] aoe: packet could not be sent on ipvlan1.  consider increasing tx_queue_len
[  317.067764][T13654] x_tables: duplicate underflow at hook 3
[  317.374875][T13679] netlink: 24 bytes leftover after parsing attributes in process `syz.0.2055'.
[  317.404216][T13680] netlink: 24 bytes leftover after parsing attributes in process `syz.0.2055'.
[  317.488531][T13690] bond0: (slave wireguard0): refused to change device type
[  317.785358][T13710] netlink: 'syz.3.2063': attribute type 29 has an invalid length.
[  318.282675][    C0] ip6_tunnel: ip6gre2 xmit: Local address not yet configured!
[  318.479129][T13758] x_tables: duplicate entry at hook 3
[  318.566132][T13760] rdma_op ffff8880291069f0 conn xmit_rdma 0000000000000000
[  318.574418][T13760] xt_ecn: cannot match TCP bits for non-tcp packets
[  318.696461][T13780] netlink: 'syz.1.2082': attribute type 12 has an invalid length.
[  318.722258][T13780] netlink: 'syz.1.2082': attribute type 29 has an invalid length.
[  319.019797][T13801] bridge0: port 5(batadv1) entered blocking state
[  319.037701][T13801] bridge0: port 5(batadv1) entered disabled state
[  319.047246][T13801] batadv1: entered allmulticast mode
[  319.054986][T13801] batadv1: entered promiscuous mode
[  319.103405][T13802] netlink: 'syz.1.2086': attribute type 3 has an invalid length.
[  319.359369][T13820] syzkaller0: entered promiscuous mode
[  319.374882][T13820] syzkaller0: entered allmulticast mode
[  319.525568][ T9386] batman_adv: batadv1: No IGMP Querier present - multicast optimizations disabled
[  319.534876][ T9386] batman_adv: batadv1: No MLD Querier present - multicast optimizations disabled
[  320.099382][T13874] x_tables: duplicate underflow at hook 1
[  320.308509][T13885] netlink: 'syz.3.2109': attribute type 12 has an invalid length.
[  320.335760][T13885] netlink: 'syz.3.2109': attribute type 29 has an invalid length.
[  320.367963][T13885] __nla_validate_parse: 17 callbacks suppressed
[  320.367981][T13885] netlink: 148 bytes leftover after parsing attributes in process `syz.3.2109'.
[  320.406967][T13885] netlink: 'syz.3.2109': attribute type 3 has an invalid length.
[  320.426510][T13885] netlink: 'syz.3.2109': attribute type 2 has an invalid length.
[  320.443725][T13885] netlink: 'syz.3.2109': attribute type 3 has an invalid length.
[  320.461308][T13885] netlink: 3 bytes leftover after parsing attributes in process `syz.3.2109'.
[  320.797969][T13908] netlink: 12 bytes leftover after parsing attributes in process `syz.4.2114'.
[  320.815806][T13908] netlink: 87 bytes leftover after parsing attributes in process `syz.4.2114'.
[  320.906947][T13914] netlink: 'syz.2.2116': attribute type 8 has an invalid length.
[  320.930416][T13914] sch_fq: defrate 0 ignored.
[  321.218020][T13944] netlink: 148 bytes leftover after parsing attributes in process `syz.3.2121'.
[  321.228018][T13944] netlink: 3 bytes leftover after parsing attributes in process `syz.3.2121'.
[  321.603632][T13957] syzkaller0: entered promiscuous mode
[  321.609116][T13957] syzkaller0: entered allmulticast mode
[  323.879056][T13914] nci: __nci_request: wait_for_completion_interruptible_timeout failed -512
[  324.094345][T13966] 8021q: adding VLAN 0 to HW filter on device ipvlan3
[  324.490089][T13993] validate_nla: 5 callbacks suppressed
[  324.490105][T13993] netlink: 'syz.0.2135': attribute type 1 has an invalid length.
[  324.570909][T13993] 8021q: adding VLAN 0 to HW filter on device bond4
[  324.726384][T13993] 8021q: adding VLAN 0 to HW filter on device batadv1
[  324.749253][T13993] bond4: (slave batadv1): making interface the new active one
[  324.770927][T13993] bond4: (slave batadv1): Enslaving as an active interface with an up link
[  325.459472][T14039] syzkaller0: entered promiscuous mode
[  325.474355][T14039] syzkaller0: entered allmulticast mode
[  325.530071][T14051] netlink: 'syz.3.2147': attribute type 12 has an invalid length.
[  325.539189][T14051] netlink: 'syz.3.2147': attribute type 29 has an invalid length.
[  325.547581][T14051] netlink: 148 bytes leftover after parsing attributes in process `syz.3.2147'.
[  325.564067][T14051] netlink: 'syz.3.2147': attribute type 3 has an invalid length.
[  325.579813][T14051] netlink: 'syz.3.2147': attribute type 2 has an invalid length.
[  325.588732][T14051] netlink: 'syz.3.2147': attribute type 3 has an invalid length.
[  325.595285][T14055] netlink: 8 bytes leftover after parsing attributes in process `syz.0.2149'.
[  325.597412][T14051] netlink: 3 bytes leftover after parsing attributes in process `syz.3.2147'.
[  325.678256][T14057] netlink: 16 bytes leftover after parsing attributes in process `syz.3.2150'.
[  327.125872][T14055] netdevsim netdevsim0 netdevsim0: entered allmulticast mode
[  327.133946][T14055] batman_adv: batadv0: Adding interface: netdevsim0
[  327.140527][T14055] batman_adv: batadv0: The MTU of interface netdevsim0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem.
[  327.166418][T14055] batman_adv: batadv0: Not using interface netdevsim0 (retrying later): interface not active
[  327.678895][T14098] netlink: 12 bytes leftover after parsing attributes in process `syz.1.2154'.
[  327.702062][T14089] netlink: 228 bytes leftover after parsing attributes in process `syz.2.2156'.
[  327.725316][T14101] netlink: 8 bytes leftover after parsing attributes in process `syz.0.2159'.
[  327.835674][T14101] syzkaller0: entered promiscuous mode
[  327.850117][T14101] syzkaller0: entered allmulticast mode
[  327.887010][T14101] netlink: 88 bytes leftover after parsing attributes in process `syz.0.2159'.
[  327.906468][T14099] syzkaller0: entered promiscuous mode
[  327.912203][T14099] syzkaller0: entered allmulticast mode
[  328.017329][T14110] IPVS: Error connecting to the multicast addr
[  328.350244][T14130] netlink: 65019 bytes leftover after parsing attributes in process `syz.2.2168'.
[  328.528345][T14145] netlink: 'syz.2.2172': attribute type 1 has an invalid length.
[  328.540818][T14144] openvswitch: netlink: Message has 1 unknown bytes.
[  328.566699][T14144] openvswitch: netlink: Flow actions may not be safe on all matching packets.
[  328.879187][T14145] 8021q: adding VLAN 0 to HW filter on device bond6
[  328.886987][T14152] netlink: 'syz.3.2173': attribute type 12 has an invalid length.
[  328.906274][T14152] netlink: 'syz.3.2173': attribute type 29 has an invalid length.
[  328.924004][T14152] netlink: 148 bytes leftover after parsing attributes in process `syz.3.2173'.
[  329.238394][T14169] bond5: option lp_interval: invalid value (0)
[  329.245265][T14169] bond5: option lp_interval: allowed values 1 - 2147483647
[  329.259561][T14169] bond5 (unregistering): Released all slaves
[  329.577184][T14169] syzkaller1: entered promiscuous mode
[  329.588217][T14169] syzkaller1: entered allmulticast mode
[  329.761778][T14192] bridge_slave_1: left allmulticast mode
[  329.782728][T14192] bridge_slave_1: left promiscuous mode
[  329.799995][T14192] bridge0: port 2(bridge_slave_1) entered disabled state
[  329.851713][T14192] bridge_slave_0: left allmulticast mode
[  329.869116][T14192] bridge_slave_0: left promiscuous mode
[  329.886817][T14192] bridge0: port 1(bridge_slave_0) entered disabled state
[  330.341248][T14202] bridge0: the hash_elasticity option has been deprecated and is always 16
[  330.383130][T14204] netlink: 'syz.3.2182': attribute type 21 has an invalid length.
[  330.531915][T14212] netlink: 'syz.1.2186': attribute type 12 has an invalid length.
[  330.552716][T14212] netlink: 'syz.1.2186': attribute type 29 has an invalid length.
[  330.565704][T14212] __nla_validate_parse: 8 callbacks suppressed
[  330.565719][T14212] netlink: 148 bytes leftover after parsing attributes in process `syz.1.2186'.
[  330.620947][T14212] netlink: 59 bytes leftover after parsing attributes in process `syz.1.2186'.
[  330.841974][T14227] netlink: 4 bytes leftover after parsing attributes in process `syz.2.2190'.
[  331.028297][T14235] IPVS: set_ctl: invalid protocol: 188 172.30.0.1:20000
[  331.195650][T14238] netlink: 'syz.1.2193': attribute type 1 has an invalid length.
[  331.332446][T14238] bond5: entered promiscuous mode
[  331.374421][T14238] 8021q: adding VLAN 0 to HW filter on device bond5
[  331.475263][T14244] bond5: (slave ipvlan4): enslaved VLAN challenged slave. Adding VLANs will be blocked as long as it is part of bond.
[  331.548655][T14244] bond5: (slave ipvlan4): The slave device specified does not support setting the MAC address
[  331.607890][T14244] bond5: (slave ipvlan4): Setting fail_over_mac to active for active-backup mode
[  331.739149][T14249] bond5: (slave ipvlan4): enslaved VLAN challenged slave. Adding VLANs will be blocked as long as it is part of bond.
[  331.784437][T14249] bond5: (slave ipvlan4): The slave device specified does not support setting the MAC address
[  331.858570][T14266] syzkaller0: entered promiscuous mode
[  331.906598][T14266] syzkaller0: entered allmulticast mode
[  332.170459][T14282] openvswitch: netlink: IP tunnel attribute has 1 unknown bytes.
[  332.201309][T14282] netlink: 60 bytes leftover after parsing attributes in process `syz.1.2207'.
[  332.328964][T14294] netlink: 4 bytes leftover after parsing attributes in process `syz.4.2211'.
[  332.439499][T14294] veth0_macvtap: left promiscuous mode
[  332.597859][T14317] netlink: 'syz.1.2213': attribute type 2 has an invalid length.
[  332.648876][T14315] netlink: 4 bytes leftover after parsing attributes in process `syz.1.2213'.
[  333.140985][T14335] netlink: 16 bytes leftover after parsing attributes in process `syz.4.2221'.
[  333.516741][T14353] xt_addrtype: both incoming and outgoing interface limitation cannot be selected
[  333.731316][T14363] netlink: 6208 bytes leftover after parsing attributes in process `syz.3.2228'.
[  333.869832][T14370] C: entered promiscuous mode
[  333.892611][T14370] netlink: 'syz.0.2232': attribute type 2 has an invalid length.
[  333.926238][T14370] A link change request failed with some changes committed already. Interface C may have been left with an inconsistent configuration, please check.
[  334.075017][T14374] netlink: 'syz.4.2234': attribute type 1 has an invalid length.
[  334.207585][T14374] 8021q: adding VLAN 0 to HW filter on device bond8
[  334.285475][T14389] netlink: 8 bytes leftover after parsing attributes in process `syz.2.2236'.
[  334.382395][T14393] netlink: 'syz.3.2240': attribute type 12 has an invalid length.
[  334.394841][T14393] netlink: 'syz.3.2240': attribute type 29 has an invalid length.
[  334.417335][T14393] netlink: 148 bytes leftover after parsing attributes in process `syz.3.2240'.
[  334.910479][T14427] openvswitch: netlink: Flow actions may not be safe on all matching packets.
[  335.069699][T14433] nftables ruleset with unbound set
[  335.096505][T14433] xt_CONNSECMARK: invalid mode: 0
[  335.395002][T14447] tipc: Enabling of bearer <eth:syzkaller0> rejected, failed to enable media
[  335.562768][ T5627] Bluetooth: hci0: command 0x0406 tx timeout
[  335.564199][ T5638] Bluetooth: hci0: Opcode 0x0c1a failed: -110
[  335.949296][T14461] openvswitch: netlink: Key type 187 is out of range max 32
[  336.110449][T14469] netlink: 'syz.4.2260': attribute type 4 has an invalid length.
[  336.202722][    C0] ip6_tunnel: ip6gre2 xmit: Local address not yet configured!
[  336.354516][T14475] netlink: 'syz.4.2264': attribute type 1 has an invalid length.
[  336.407460][T14479] netlink: 'syz.3.2266': attribute type 13 has an invalid length.
[  336.825819][T14483] __nla_validate_parse: 3 callbacks suppressed
[  336.825836][T14483] netlink: 4 bytes leftover after parsing attributes in process `syz.3.2268'.
[  336.976338][T14502] netlink: 'syz.0.2271': attribute type 12 has an invalid length.
[  336.999478][T14505] netlink: 'syz.0.2271': attribute type 12 has an invalid length.
[  337.113436][T14502] bond5: option primary_reselect: invalid value (255)
[  337.160644][T14309] Set syz1 is full, maxelem 65536 reached
[  337.163307][T14502] bond5 (unregistering): Released all slaves
[  337.239992][T14505] workqueue: Failed to create a rescuer kthread for wq "bond5": -EINTR
[  337.298187][T14515] netlink: 24 bytes leftover after parsing attributes in process `syz.2.2276'.
[  337.326536][T14516] netlink: 24 bytes leftover after parsing attributes in process `syz.2.2276'.
[  337.375381][T14519] netlink: 32 bytes leftover after parsing attributes in process `syz.3.2275'.
[  337.733673][T14553] netlink: 28 bytes leftover after parsing attributes in process `syz.4.2283'.
[  337.764193][T14556] netlink: 'syz.0.2286': attribute type 1 has an invalid length.
[  337.773643][T14556] netlink: 44 bytes leftover after parsing attributes in process `syz.0.2286'.
[  337.936033][T14568] syzkaller0: entered promiscuous mode
[  337.941655][T14568] syzkaller0: entered allmulticast mode
[  338.224760][T14587] netlink: 52 bytes leftover after parsing attributes in process `syz.4.2295'.
[  338.325540][T14592] netlink: 68 bytes leftover after parsing attributes in process `syz.4.2296'.
[  338.342772][T14592] netlink: 24 bytes leftover after parsing attributes in process `syz.4.2296'.
[  338.446211][T14584] IPv6: NLM_F_CREATE should be specified when creating new route
[  338.449266][T14595] netlink: 'syz.4.2297': attribute type 1 has an invalid length.
[  338.487029][T14600] batadv_slave_0: entered promiscuous mode
[  338.494978][T14600] netlink: 4 bytes leftover after parsing attributes in process `syz.4.2297'.
[  338.720105][T14608] netlink: 'syz.1.2301': attribute type 1 has an invalid length.
[  338.745550][T14611] netlink: 'syz.1.2301': attribute type 1 has an invalid length.
[  338.832289][T14608] bond6: option mode: invalid value (11)
[  338.871784][T14608] bond6 (unregistering): Released all slaves
[  338.916567][T14611] workqueue: Failed to create a rescuer kthread for wq "bond6": -EINTR
[  339.185625][T14638] netlink: 'syz.4.2308': attribute type 1 has an invalid length.
[  339.458341][T14644] bond6: entered promiscuous mode
[  339.470892][T14644] 8021q: adding VLAN 0 to HW filter on device bond6
[  339.550784][T14644] syzkaller0: entered promiscuous mode
[  339.575782][T14644] syzkaller0: entered allmulticast mode
[  339.630514][T14651] 8021q: adding VLAN 0 to HW filter on device ipvlan2
[  339.650661][T14654] xt_hashlimit: size too large, truncated to 1048576
[  340.416203][T14679] netlink: 'syz.2.2321': attribute type 11 has an invalid length.
[  340.643880][T14684] openvswitch: netlink: Flow actions may not be safe on all matching packets.
[  340.957960][T14688] bond7: option resend_igmp: invalid value (32767)
[  340.965577][T14688] bond7: option resend_igmp: allowed values 0 - 255
[  340.991931][T14688] bond7 (unregistering): Released all slaves
[  341.115101][T14684] C speed is unknown, defaulting to 1000
[  341.159564][T14684] vxcan1 speed is unknown, defaulting to 1000
[  341.244849][T14716] validate_nla: 1 callbacks suppressed
[  341.244865][T14716] netlink: 'syz.4.2331': attribute type 1 has an invalid length.
[  341.324187][T14719] IPVS: set_ctl: invalid protocol: 117 172.20.20.170:20000
[  341.595217][   T29] audit: type=1800 audit(1783666457.681:12): pid=14727 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed comm="syz.4.2335" name="memory.events" dev="tmpfs" ino=2409 res=0 errno=0
[  341.694471][T14733] dvmrp0: entered allmulticast mode
[  341.810093][T14735] sctp: [Deprecated]: syz.1.2336 (pid 14735) Use of struct sctp_assoc_value in delayed_ack socket option.
[  341.810093][T14735] Use struct sctp_sack_info instead
[  342.151187][T14743] __nla_validate_parse: 10 callbacks suppressed
[  342.151205][T14743] netlink: 4 bytes leftover after parsing attributes in process `syz.4.2339'.
[  342.174048][T14743] netlink: 4 bytes leftover after parsing attributes in process `syz.4.2339'.
[  342.311426][T14751] netlink: 4 bytes leftover after parsing attributes in process `syz.4.2341'.
[  342.540975][T14761] vlan2: entered allmulticast mode
[  342.546937][T14761] bridge_slave_0: entered allmulticast mode
[  342.662163][T14763] netlink: 40 bytes leftover after parsing attributes in process `syz.2.2344'.
[  342.730176][T14765] Cannot find del_set index 4 as target
[  342.744225][T14765] pimreg: entered allmulticast mode
[  343.952229][T14700] nci: __nci_request: wait_for_completion_interruptible_timeout failed -512
[  344.217760][T14775] netlink: 'syz.1.2350': attribute type 4 has an invalid length.
[  344.303788][T14789] netlink: 12 bytes leftover after parsing attributes in process `syz.1.2350'.
[  344.320289][T14784] syzkaller0: entered promiscuous mode
[  344.353721][T14784] syzkaller0: entered allmulticast mode
[  344.506834][T14798] netlink: 'syz.4.2352': attribute type 39 has an invalid length.
[  345.448892][T14808] syzkaller1: entered promiscuous mode
[  345.461009][T14808] syzkaller1: entered allmulticast mode
[  345.551014][T14813] macsec0: entered promiscuous mode
[  345.556513][T14813] bridge0: entered promiscuous mode
[  345.577671][T14813] macsec0: entered allmulticast mode
[  345.593658][T14813] bridge0: entered allmulticast mode
[  345.611740][T14813] bridge0: port 1(macsec0) entered blocking state
[  345.647488][T14813] bridge0: port 1(macsec0) entered disabled state
[  345.703411][T14813] bridge0: left allmulticast mode
[  345.722438][T14813] bridge0: left promiscuous mode
[  345.886685][T14832] syzkaller0: entered promiscuous mode
[  345.894602][T14832] syzkaller0: entered allmulticast mode
[  346.186715][T14850] netlink: 'syz.0.2367': attribute type 1 has an invalid length.
[  346.214345][T14850] netlink: 224 bytes leftover after parsing attributes in process `syz.0.2367'.
[  346.254628][T14855] netlink: 8 bytes leftover after parsing attributes in process `syz.1.2369'.
[  346.427287][T14873] netlink: 'syz.2.2372': attribute type 2 has an invalid length.
[  346.434641][T14865] bond7: Unable to set peer notification delay as MII monitoring is disabled
[  346.450036][T14865] bond7 (unregistering): Released all slaves
[  346.649272][T14855] netlink: 72 bytes leftover after parsing attributes in process `syz.1.2369'.
[  346.676935][T14870] syzkaller1: entered promiscuous mode
[  346.691926][T14870] syzkaller1: entered allmulticast mode
[  346.706584][T14885] netlink: 'syz.2.2373': attribute type 2 has an invalid length.
[  346.758661][T14885] : entered promiscuous mode
[  347.932743][T14940] netlink: 8 bytes leftover after parsing attributes in process `syz.3.2381'.
[  348.104494][T14946] netlink: 12 bytes leftover after parsing attributes in process `syz.3.2383'.
[  348.116453][T14947] netlink: 12 bytes leftover after parsing attributes in process `syz.3.2383'.
[  349.239024][T14854] nci: __nci_request: wait_for_completion_interruptible_timeout failed -512
[  350.100085][T14996] Bluetooth: hci1: Opcode 0x0401 failed: -4
[  350.312371][T15010] netlink: 8 bytes leftover after parsing attributes in process `syz.4.2399'.
[  350.323546][T15011] netlink: 'syz.2.2401': attribute type 2 has an invalid length.
[  350.415400][T15010] gtp1: entered promiscuous mode
[  350.437179][T15010] gtp1: entered allmulticast mode
[  350.742628][T15028] bond7 (unregistering): Released all slaves
[  350.997219][T15048] netlink: 24 bytes leftover after parsing attributes in process `syz.3.2408'.
[  351.039229][T15048] openvswitch: netlink: Flow set message rejected, Key attribute missing.
[  351.322070][T15066] netlink: 'syz.4.2412': attribute type 8 has an invalid length.
[  351.364901][T15071] netlink: 'syz.4.2412': attribute type 8 has an invalid length.
[  351.444785][T15068] syzkaller0: entered promiscuous mode
[  351.452786][T15068] syzkaller0: entered allmulticast mode
[  351.566500][T15076] ip_vti0: left promiscuous mode
[  351.590613][T15078] openvswitch: netlink: Actions may not be safe on all matching packets
[  351.677490][T15078] openvswitch: netlink: Actions may not be safe on all matching packets
[  351.917827][T15088] syzkaller0: entered promiscuous mode
[  351.943243][T15088] syzkaller0: entered allmulticast mode
[  351.971062][T15094] netlink: 'syz.3.2419': attribute type 12 has an invalid length.
[  352.013303][T15094] netlink: 'syz.3.2419': attribute type 29 has an invalid length.
[  352.039620][T15094] netlink: 148 bytes leftover after parsing attributes in process `syz.3.2419'.
[  352.052990][T15094] netlink: 51 bytes leftover after parsing attributes in process `syz.3.2419'.
[  352.123158][ T5627] Bluetooth: hci1: command 0x0401 tx timeout
[  352.519913][T15122] bond7: option arp_all_targets: invalid value (18446744073709551613)
[  352.538819][T15122] bond7 (unregistering): Released all slaves
[  353.564591][T15180] netlink: 56 bytes leftover after parsing attributes in process `syz.4.2443'.
[  353.594809][T15180] netlink: 12 bytes leftover after parsing attributes in process `syz.4.2443'.
[  353.613009][T15180] netlink: 31 bytes leftover after parsing attributes in process `syz.4.2443'.
[  353.645836][T15180] netlink: 'syz.4.2443': attribute type 2 has an invalid length.
[  353.680402][T15180] netlink: 31 bytes leftover after parsing attributes in process `syz.4.2443'.
[  354.213548][T15201] netlink: 8 bytes leftover after parsing attributes in process `syz.0.2451'.
[  354.407950][T15211] netlink: 4 bytes leftover after parsing attributes in process `syz.3.2454'.
[  354.747479][T15230] netlink: 8 bytes leftover after parsing attributes in process `syz.3.2459'.
[  354.761925][T15231] netlink: 'syz.0.2460': attribute type 5 has an invalid length.
[  354.771682][T15231] netlink: 140 bytes leftover after parsing attributes in process `syz.0.2460'.
[  354.968706][T15238] syzkaller0: entered promiscuous mode
[  354.975363][T15238] syzkaller0: entered allmulticast mode
[  354.991608][T15238] TC_ACT_REPEAT abuse ?
[  355.659482][T15263] netlink: 8 bytes leftover after parsing attributes in process `syz.1.2468'.
[  355.706893][T15263] 8021q: adding VLAN 0 to HW filter on device macsec2
[  355.766799][T15272] pimreg: left allmulticast mode
[  355.929826][T15276] netlink: 'syz.3.2473': attribute type 12 has an invalid length.
[  355.958224][T15276] netlink: 'syz.3.2473': attribute type 29 has an invalid length.
[  356.004466][T15276] netlink: 148 bytes leftover after parsing attributes in process `syz.3.2473'.
[  356.040669][T15276] netlink: 'syz.3.2473': attribute type 3 has an invalid length.
[  356.142019][T15285] xt_hl: Unknown Hop Limit match mode: 206
[  356.152043][T15283] tipc: Enabled bearer <eth:syzkaller0>, priority 0
[  356.173663][T15283] sch_tbf: burst 255 is lower than device syzkaller0 mtu (1514) !
[  356.210678][T15283] tipc: Resetting bearer <eth:syzkaller0>
[  356.407071][T15282] tipc: Disabling bearer <eth:syzkaller0>
[  356.795281][T15312] dvmrp8: entered allmulticast mode
[  356.801887][T15318] netlink: 'syz.3.2488': attribute type 12 has an invalid length.
[  356.810314][T15318] netlink: 'syz.3.2488': attribute type 29 has an invalid length.
[  356.818632][T15318] netlink: 'syz.3.2488': attribute type 3 has an invalid length.
[  357.658713][T15357] netlink: 'syz.3.2499': attribute type 21 has an invalid length.
[  357.694929][T15357] netlink: 'syz.3.2499': attribute type 5 has an invalid length.
[  357.735314][T15357] netlink: 'syz.3.2499': attribute type 6 has an invalid length.
[  358.209778][T15375] bond7: option tlb_dynamic_lb: mode dependency failed, not supported in mode balance-rr(0)
[  358.233346][T15375] bond7 (unregistering): Released all slaves
[  358.938152][T15403] netlink: 'syz.1.2514': attribute type 2 has an invalid length.
[  358.954821][T15399] macvlan3: entered promiscuous mode
[  358.974716][T15399] macvlan3: entered allmulticast mode
[  359.045015][T15406] pim6reg: entered allmulticast mode
[  359.075105][T15410] __nla_validate_parse: 10 callbacks suppressed
[  359.075212][T15410] netlink: 20 bytes leftover after parsing attributes in process `syz.1.2514'.
[  359.404888][T15416] netlink: 'syz.4.2518': attribute type 58 has an invalid length.
[  359.449911][T15416] netlink: 20 bytes leftover after parsing attributes in process `syz.4.2518'.
[  359.465437][T15430] netlink: 'syz.2.2524': attribute type 1 has an invalid length.
[  359.544577][T15435] netlink: 8 bytes leftover after parsing attributes in process `syz.1.2525'.
[  359.556638][T15435] netlink: 'syz.1.2525': attribute type 10 has an invalid length.
[  359.565638][T15435] netlink: 12 bytes leftover after parsing attributes in process `syz.1.2525'.
[  359.635506][T15430] 8021q: adding VLAN 0 to HW filter on device bond7
[  359.671302][T15430] netlink: 'syz.2.2524': attribute type 10 has an invalid length.
[  359.689836][T15430] netlink: 40 bytes leftover after parsing attributes in process `syz.2.2524'.
[  359.719320][T15437] bond7: (slave veth3): Enslaving as a backup interface with a down link
[  359.739459][T15448] netlink: 8 bytes leftover after parsing attributes in process `syz.4.2528'.
[  359.750254][T15435] geneve4: entered promiscuous mode
[  359.757306][T15435] geneve4: entered allmulticast mode
[  359.759235][T15448] netlink: 4 bytes leftover after parsing attributes in process `syz.4.2528'.
[  359.772285][T15448] netlink: 'syz.4.2528': attribute type 14 has an invalid length.
[  359.782342][T15448] netlink: 'syz.4.2528': attribute type 13 has an invalid length.
[  359.921141][T15452] netlink: 17 bytes leftover after parsing attributes in process `syz.3.2530'.
[  359.952380][T15452] netlink: 14601 bytes leftover after parsing attributes in process `syz.3.2530'.
[  360.182191][T15464] netlink: 4 bytes leftover after parsing attributes in process `syz.0.2534'.
[  360.745025][T15478] 8021q: VLANs not supported on lo
[  360.975209][T15495] macsec2: entered promiscuous mode
[  361.708662][T15545] xt_l2tp: v2 doesn't support IP mode
[  361.806381][T15546] nbd: must specify an index to disconnect
[  361.937229][T15546] bridge6: entered promiscuous mode
[  361.943229][T15546] bridge6: entered allmulticast mode
[  362.147695][T15570] ipvlan2: entered promiscuous mode
[  362.380494][T15579] netlink: zone id is out of range
[  362.386657][T15579] netlink: zone id is out of range
[  362.388528][T15582] ªªªªªª: renamed from bond_slave_0
[  362.398853][T15579] netlink: zone id is out of range
[  362.423563][T15579] netlink: zone id is out of range
[  362.448598][T15579] netlink: set zone limit has 4 unknown bytes
[  362.595241][T15594] openvswitch: netlink: ufid size 22 bytes exceeds the range (1, 16)
[  362.632003][T15592] 8021q: adding VLAN 0 to HW filter on device bond6
[  362.641758][T15594] openvswitch: netlink: Flow set message rejected, Key attribute missing.
[  362.686624][T15601] 8021q: adding VLAN 0 to HW filter on device batadv2
[  362.704810][T15601] bond6: (slave batadv2): making interface the new active one
[  362.740793][T15601] bond6: (slave batadv2): Enslaving as an active interface with an up link
[  364.518379][T15683] __nla_validate_parse: 7 callbacks suppressed
[  364.518398][T15683] netlink: 8 bytes leftover after parsing attributes in process `syz.0.2589'.
[  364.521388][T15681] netlink: 8 bytes leftover after parsing attributes in process `syz.0.2589'.
[  364.525249][T15683] netlink: 4 bytes leftover after parsing attributes in process `syz.0.2589'.
[  364.557619][T15681] netlink: 4 bytes leftover after parsing attributes in process `syz.0.2589'.
[  365.950213][T15613] nci: __nci_request: wait_for_completion_interruptible_timeout failed -512
[  366.271861][T15694] netlink: 16 bytes leftover after parsing attributes in process `syz.0.2594'.
[  366.435826][T15697] netlink: 24 bytes leftover after parsing attributes in process `syz.2.2595'.
[  366.492000][T15702] validate_nla: 3 callbacks suppressed
[  366.492099][T15702] netlink: 'syz.0.2597': attribute type 10 has an invalid length.
[  366.539247][T15702] netlink: 4 bytes leftover after parsing attributes in process `syz.0.2597'.
[  366.625304][T15710] bridge0: port 1(veth1_to_bridge) entered blocking state
[  366.641646][T15710] bridge0: port 1(veth1_to_bridge) entered disabled state
[  366.663471][T15710] veth1_to_bridge: entered allmulticast mode
[  366.691450][T15710] veth1_to_bridge: entered promiscuous mode
[  366.847422][T15726] openvswitch: netlink: Message has 8 unknown bytes.
[  367.260564][T15702] Bluetooth: hci1: Opcode 0x0c1a failed: -4
[  367.286383][T15702] Bluetooth: hci1: Error when powering off device on rfkill (-4)
[  367.349062][T15746] netlink: 4 bytes leftover after parsing attributes in process `syz.4.2609'.
[  367.366061][T15702] Bluetooth: hci0: Opcode 0x0c1a failed: -4
[  367.384315][T15702] Bluetooth: hci0: Error when powering off device on rfkill (-4)
[  367.396988][T15746] netlink: 4 bytes leftover after parsing attributes in process `syz.4.2609'.
[  367.435439][T15702] Bluetooth: hci2: Opcode 0x0c1a failed: -4
[  367.449102][T15751] netlink: 56 bytes leftover after parsing attributes in process `syz.3.2608'.
[  367.453659][T15702] Bluetooth: hci2: Error when powering off device on rfkill (-4)
[  367.493528][T15749] syzkaller0: entered promiscuous mode
[  367.499118][T15749] syzkaller0: entered allmulticast mode
[  367.527887][T15702] Bluetooth: hci3: Opcode 0x0c1a failed: -4
[  367.571237][T15702] Bluetooth: hci3: Error when powering off device on rfkill (-4)
[  367.623056][T15702] Bluetooth: hci4: Opcode 0x0c1a failed: -4
[  367.651420][T15702] Bluetooth: hci4: Error when powering off device on rfkill (-4)
[  368.294871][T15786] syzkaller0: entered promiscuous mode
[  368.310919][T15786] syzkaller0: entered allmulticast mode
[  368.677323][T15801] xt_l2tp: unknown flags: 10
[  368.839712][T15814] FAULT_INJECTION: forcing a failure.
[  368.839712][T15814] name fail_usercopy, interval 1, probability 0, space 0, times 1
[  368.859867][T15814] CPU: 0 UID: 0 PID: 15814 Comm: syz.4.2627 Not tainted syzkaller #0 PREEMPT(full) 
[  368.859896][T15814] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 05/09/2026
[  368.859918][T15814] Call Trace:
[  368.859997][T15814]  <TASK>
[  368.860066][T15814]  dump_stack_lvl+0xe8/0x150
[  368.860208][T15814]  should_fail_ex+0x40c/0x560
[  368.860297][T15814]  _copy_from_user+0x2d/0xb0
[  368.860372][T15814]  ___sys_sendmsg+0x1c6/0x360
[  368.860515][T15814]  ? __lock_acquire+0x683/0x2cf0
[  368.860679][T15814]  ? __pfx____sys_sendmsg+0x10/0x10
[  368.860736][T15814]  ? __fget_files+0x2a/0x420
[  368.860785][T15814]  ? __fget_files+0x3a2/0x420
[  368.860816][T15814]  __x64_sys_sendmsg+0x1b1/0x290
[  368.860845][T15814]  ? __pfx___x64_sys_sendmsg+0x10/0x10
[  368.860888][T15814]  ? entry_SYSCALL_64_after_hwframe+0x77/0x7f
[  368.860934][T15814]  do_syscall_64+0x174/0x580
[  368.861044][T15814]  ? trace_irq_disable+0x3b/0x140
[  368.861085][T15814]  ? clear_bhb_loop+0x40/0x90
[  368.861108][T15814]  entry_SYSCALL_64_after_hwframe+0x77/0x7f
[  368.861126][T15814] RIP: 0033:0x7f61d6b9de59
[  368.861173][T15814] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48
[  368.861189][T15814] RSP: 002b:00007f61d79ce028 EFLAGS: 00000246 ORIG_RAX: 000000000000002e
[  368.861239][T15814] RAX: ffffffffffffffda RBX: 00007f61d6e25fa0 RCX: 00007f61d6b9de59
[  368.861253][T15814] RDX: 0000000000000000 RSI: 00002000000001c0 RDI: 0000000000000003
[  368.861263][T15814] RBP: 00007f61d79ce090 R08: 0000000000000000 R09: 0000000000000000
[  368.861274][T15814] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001
[  368.861285][T15814] R13: 00007f61d6e26038 R14: 00007f61d6e25fa0 R15: 00007fff42fbb898
[  368.861316][T15814]  </TASK>
[  369.554993][T15846] IPVS: set_ctl: invalid protocol: 106 255.255.255.255:20003
[  369.695369][T15853] __nla_validate_parse: 5 callbacks suppressed
[  369.695387][T15853] netlink: 16 bytes leftover after parsing attributes in process `syz.3.2640'.
[  369.828937][T15863] netlink: 8 bytes leftover after parsing attributes in process `syz.1.2642'.
[  369.867764][T15863] netlink: 'syz.1.2642': attribute type 10 has an invalid length.
[  369.912319][T15863] netlink: 12 bytes leftover after parsing attributes in process `syz.1.2642'.
[  370.034121][T15863] geneve4: entered promiscuous mode
[  370.049253][T15863] geneve4: entered allmulticast mode
[  370.058447][T15873] openvswitch: netlink: Flow actions may not be safe on all matching packets.
[  370.071117][ T5794] netdevsim netdevsim1 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0
[  370.098839][ T5794] netdevsim netdevsim1 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0
[  370.150461][ T5794] netdevsim netdevsim1 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0
[  370.188134][ T5794] netdevsim netdevsim1 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0
[  370.312435][T15883] IPv6: RTM_NEWROUTE with no NLM_F_CREATE or NLM_F_REPLACE
[  370.321831][T15883] IPv6: NLM_F_CREATE should be set when creating new route
[  370.329902][T15883] IPv6: NLM_F_CREATE should be set when creating new route
[  370.337915][T15883] IPv6: NLM_F_CREATE should be set when creating new route
[  370.404483][T15886] IPv6: RTM_NEWROUTE with no NLM_F_CREATE or NLM_F_REPLACE
[  370.430233][T15883] IPv6: RTM_NEWROUTE with no NLM_F_CREATE or NLM_F_REPLACE
[  370.439013][T15886] IPv6: RTM_NEWROUTE with no NLM_F_CREATE or NLM_F_REPLACE
[  370.549857][T15900] vcan0: tx address claim with different name
[  370.934613][T15911] netlink: 16 bytes leftover after parsing attributes in process `syz.3.2653'.
[  371.339196][T15936] xt_TCPMSS: path-MTU clamping only supported in FORWARD, OUTPUT and POSTROUTING hooks
[  371.412718][    C0] ip6_tunnel: ip6gre2 xmit: Local address not yet configured!
[  371.648432][T15953] netlink: 'syz.2.2659': attribute type 6 has an invalid length.
[  371.689737][T15953] syzkaller0: entered promiscuous mode
[  371.704560][T15953] syzkaller0: entered allmulticast mode
[  371.764556][T15961] syzkaller0: entered promiscuous mode
[  371.786565][T15961] syzkaller0: entered allmulticast mode
[  372.387828][T15993] netlink: 28 bytes leftover after parsing attributes in process `syz.0.2672'.
[  372.390184][T15992] netlink: 8 bytes leftover after parsing attributes in process `syz.2.2671'.
[  372.703146][T16015] tipc: Enabled bearer <eth:syzkaller0>, priority 0
[  372.723660][T16011] syzkaller0: entered promiscuous mode
[  372.764982][T16011] syzkaller0: entered allmulticast mode
[  372.799433][T16011] sch_tbf: burst 255 is lower than device syzkaller0 mtu (1514) !
[  372.805782][T16022] netlink: 12 bytes leftover after parsing attributes in process `syz.3.2680'.
[  372.816801][T16022] netlink: 12 bytes leftover after parsing attributes in process `syz.3.2680'.
[  372.995750][T16030] netlink: 40 bytes leftover after parsing attributes in process `syz.1.2681'.
[  373.023211][T16011] tipc: Resetting bearer <eth:syzkaller0>
[  373.111755][T16011] tipc: Disabling bearer <eth:syzkaller0>
[  373.230089][T16038] netlink: 'syz.3.2687': attribute type 11 has an invalid length.
[  373.257945][T16038] netlink: 'syz.3.2687': attribute type 4 has an invalid length.
[  373.269472][T16038] netlink: 224 bytes leftover after parsing attributes in process `syz.3.2687'.
[  373.418138][T16054] xt_hashlimit: size too large, truncated to 1048576
[  373.855485][T16070] netlink: 'syz.1.2695': attribute type 1 has an invalid length.
[  373.883174][T16070] netlink: 'syz.1.2695': attribute type 2 has an invalid length.
[  373.978076][T16075] netlink: 'syz.1.2695': attribute type 1 has an invalid length.
[  374.011529][T16075] netlink: 'syz.1.2695': attribute type 2 has an invalid length.
[  374.730321][T16108] tipc: Enabling of bearer <udp:syz0> rejected, failed to enable media
[  374.829595][T16116] __nla_validate_parse: 2 callbacks suppressed
[  374.829614][T16116] netlink: 4 bytes leftover after parsing attributes in process `syz.2.2703'.
[  374.897999][T16119] netlink: 16 bytes leftover after parsing attributes in process `syz.4.2707'.
[  375.034309][T16127] bridge7: entered promiscuous mode
[  375.076715][T16127] bridge7: entered allmulticast mode
[  375.395983][T16138] 8021q: adding VLAN 0 to HW filter on device bond7
[  375.410169][T16138] bond0: (slave bond7): Enslaving as an active interface with an up link
[  375.469025][T16139] 8021q: adding VLAN 0 to HW filter on device bond8
[  375.478257][T16139] bond0: (slave bond8): Enslaving as an active interface with an up link
[  375.689250][T16158] netlink: 8 bytes leftover after parsing attributes in process `syz.1.2717'.
[  376.028276][T16168] openvswitch: netlink: Flow get message rejected, Key attribute missing.
[  376.444739][T16185] netlink: 'syz.2.2724': attribute type 1 has an invalid length.
[  376.585514][T16188] netlink: 8 bytes leftover after parsing attributes in process `syz.2.2725'.
[  376.787568][T16198] netlink: 14 bytes leftover after parsing attributes in process `syz.2.2725'.
[  376.816473][T16198] netlink: 32 bytes leftover after parsing attributes in process `syz.2.2725'.
[  377.138129][T16210] netlink: 12 bytes leftover after parsing attributes in process `syz.3.2730'.
[  377.251675][T16219] netlink: 48 bytes leftover after parsing attributes in process `syz.2.2732'.
[  377.550578][T16232] netlink: 'syz.1.2735': attribute type 21 has an invalid length.
[  377.696834][T16232] bond9: option lacp_rate: mode dependency failed, not supported in mode broadcast(3)
[  377.721957][T16232] bond9 (unregistering): Released all slaves
[  377.756434][T16250] netlink: 'syz.4.2739': attribute type 1 has an invalid length.
[  377.778582][T16250] netlink: 228 bytes leftover after parsing attributes in process `syz.4.2739'.
[  377.820034][T16250] netlink: 256 bytes leftover after parsing attributes in process `syz.4.2739'.
[  378.405801][T16285] netlink: 'syz.4.2750': attribute type 23 has an invalid length.
[  378.500652][T16290] openvswitch: netlink: Flow actions may not be safe on all matching packets.
[  378.587640][T16286] syzkaller0: entered promiscuous mode
[  378.609589][T16286] syzkaller0: entered allmulticast mode
[  379.142920][T16316] netlink: 'syz.0.2760': attribute type 1 has an invalid length.
[  379.427825][T16322] netlink: 'syz.2.2764': attribute type 10 has an invalid length.
[  379.461311][T16322] A link change request failed with some changes committed already. Interface geneve1 may have been left with an inconsistent configuration, please check.
[  379.961327][T16343] bridge7: trying to set multicast startup query interval above maximum, setting to 8640000 (86400000ms)
[  380.265563][ T5638] Bluetooth: hci5: unexpected cc 0x0c03 length: 249 > 1
[  380.278864][ T5638] Bluetooth: hci5: unexpected cc 0x1003 length: 249 > 9
[  380.295480][ T5638] Bluetooth: hci5: unexpected cc 0x1001 length: 249 > 9
[  380.308286][ T5638] Bluetooth: hci5: unexpected cc 0x0c23 length: 249 > 4
[  380.319456][ T5638] Bluetooth: hci5: unexpected cc 0x0c38 length: 249 > 2
[  380.346975][ T5627] Bluetooth: hci5: unexpected cc 0x0c03 length: 249 > 1
[  380.358583][ T5627] Bluetooth: hci5: unexpected cc 0x1003 length: 249 > 9
[  380.374425][ T5627] Bluetooth: hci5: unexpected cc 0x1001 length: 249 > 9
[  380.383948][T16357] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium
[  380.403644][ T5627] Bluetooth: hci5: unexpected cc 0x0c23 length: 249 > 4
[  380.414040][ T5627] Bluetooth: hci5: unexpected cc 0x0c38 length: 249 > 2
[  380.913667][T16373] netlink: 'syz.0.2777': attribute type 1 has an invalid length.
[  380.966781][T16373] bond6 (unregistering): Released all slaves
[  381.075318][T16373] __nla_validate_parse: 4 callbacks suppressed
[  381.075337][T16373] netlink: 28 bytes leftover after parsing attributes in process `syz.0.2777'.
[  381.575364][T16354] C speed is unknown, defaulting to 1000
[  381.606009][T16354] vxcan1 speed is unknown, defaulting to 1000
[  381.644425][T16403] netlink: 'syz.3.2781': attribute type 1 has an invalid length.
[  381.664591][T16403] netlink: 224 bytes leftover after parsing attributes in process `syz.3.2781'.
[  381.983530][T16418] netlink: 4 bytes leftover after parsing attributes in process `syz.4.2785'.
[  381.998735][T16423] netlink: 8 bytes leftover after parsing attributes in process `syz.0.2786'.
[  382.009128][T16423] netlink: 8 bytes leftover after parsing attributes in process `syz.0.2786'.
[  382.068545][T16426] netlink: 8 bytes leftover after parsing attributes in process `syz.0.2786'.
[  382.114753][T16423] netlink: 8 bytes leftover after parsing attributes in process `syz.0.2786'.
[  382.443772][ T5638] Bluetooth: hci5: command tx timeout
[  383.019714][T16470] netlink: 59 bytes leftover after parsing attributes in process `syz.3.2796'.
[  383.517947][T16489] netlink: 'syz.0.2799': attribute type 3 has an invalid length.
[  383.527413][T16489] netlink: 'syz.0.2799': attribute type 1 has an invalid length.
[  383.546807][T16489] netlink: 212 bytes leftover after parsing attributes in process `syz.0.2799'.
[  383.606392][T16489] NCSI netlink: No device for ifindex 813332851
[  384.085797][T16354] bridge0: port 1(bridge_slave_0) entered blocking state
[  384.115447][T16354] bridge0: port 1(bridge_slave_0) entered disabled state
[  384.142426][T16354] bridge_slave_0: entered allmulticast mode
[  384.170011][T16354] bridge_slave_0: entered promiscuous mode
[  384.193538][T16521] netlink: 24 bytes leftover after parsing attributes in process `syz.0.2806'.
[  384.198403][T16354] bridge0: port 2(bridge_slave_1) entered blocking state
[  384.232122][T16354] bridge0: port 2(bridge_slave_1) entered disabled state
[  384.252467][T16354] bridge_slave_1: entered allmulticast mode
[  384.268284][T16354] bridge_slave_1: entered promiscuous mode
[  384.441567][T16354] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link
[  384.484722][T16531] netlink: 'syz.0.2809': attribute type 3 has an invalid length.
[  384.525036][ T5638] Bluetooth: hci5: command tx timeout
[  384.541052][T16354] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link
[  384.653732][T16354] team0: Port device team_slave_0 added
[  384.678162][T16354] team0: Port device team_slave_1 added
[  384.801514][T16354] batman_adv: batadv0: Adding interface: batadv_slave_0
[  384.817145][T16354] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem.
[  384.867042][T16354] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active
[  384.909350][T16354] batman_adv: batadv0: Adding interface: batadv_slave_1
[  384.933203][T16354] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem.
[  385.001242][T16354] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active
[  385.149797][T16553] netlink: 'syz.1.2817': attribute type 1 has an invalid length.
[  385.281149][T16354] hsr_slave_0: entered promiscuous mode
[  385.295336][T16354] hsr_slave_1: entered promiscuous mode
[  385.314239][T16354] debugfs: 'hsr0' already exists in 'hsr'
[  385.320697][T16354] Cannot create hsr debugfs directory
[  385.335569][T16553] workqueue: Failed to create a rescuer kthread for wq "bond9": -EINTR
[  385.477936][T16561] netlink: 'syz.3.2818': attribute type 1 has an invalid length.
[  385.788641][T16579] netlink: 'syz.3.2821': attribute type 7 has an invalid length.
[  385.951723][T16584] openvswitch: netlink: IPv4 tunnel dst address is zero
[  385.979578][T16584] openvswitch: netlink: Flow actions may not be safe on all matching packets.
[  386.139379][T16586] team0: entered promiscuous mode
[  386.162646][T16586] team_slave_0: entered promiscuous mode
[  386.180941][T16586] team_slave_1: entered promiscuous mode
[  386.195337][T16586] geneve1: entered promiscuous mode
[  386.209766][T16586] macvlan4: entered promiscuous mode
[  386.292310][T16586] team0: left promiscuous mode
[  386.297739][T16586] team_slave_0: left promiscuous mode
[  386.304852][T16586] team_slave_1: left promiscuous mode
[  386.310569][T16586] geneve1: left promiscuous mode
[  386.317757][T16586] macvlan4: left promiscuous mode
[  386.571631][T16603] __nla_validate_parse: 7 callbacks suppressed
[  386.571668][T16603] netlink: 8 bytes leftover after parsing attributes in process `syz.1.2828'.
[  386.597420][T16603] netlink: 8 bytes leftover after parsing attributes in process `syz.1.2828'.
[  386.618549][ T5638] Bluetooth: hci5: command tx timeout
[  386.871314][T16354] netdevsim netdevsim2 netdevsim3 (unregistering): unset [0, 0] type 1 family 0 port 8472 - 0
[  386.884017][T16354] netdevsim netdevsim2 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[  386.955707][T16617] netlink: 88 bytes leftover after parsing attributes in process `syz.3.2831'.
[  387.138158][T16354] netdevsim netdevsim2 netdevsim2 (unregistering): unset [0, 0] type 1 family 0 port 8472 - 0
[  387.177511][T16354] netdevsim netdevsim2 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[  387.237848][T16631] netlink: 12 bytes leftover after parsing attributes in process `syz.3.2834'.
[  387.272926][T16631] netlink: 12 bytes leftover after parsing attributes in process `syz.3.2834'.
[  387.292131][T16631] netlink: 12 bytes leftover after parsing attributes in process `syz.3.2834'.
[  387.361858][T16354] netdevsim netdevsim2 netdevsim1 (unregistering): unset [0, 0] type 1 family 0 port 8472 - 0
[  387.390990][T16354] netdevsim netdevsim2 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[  387.418335][T16639] netlink: 12 bytes leftover after parsing attributes in process `syz.4.2838'.
[  387.560007][T16354] netdevsim netdevsim2 netdevsim0 (unregistering): unset [0, 0] type 1 family 0 port 8472 - 0
[  387.578644][T16354] netdevsim netdevsim2 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[  387.810201][T16652] netlink: 12 bytes leftover after parsing attributes in process `syz.1.2844'.
[  387.811115][T16655] netlink: 12 bytes leftover after parsing attributes in process `syz.0.2842'.
[  387.843175][T16652] netlink: 12 bytes leftover after parsing attributes in process `syz.1.2844'.
[  387.913881][T16655] xfrm2: entered promiscuous mode
[  387.926398][T16655] xfrm2: entered allmulticast mode
[  388.130738][T16662] veth0: entered promiscuous mode
[  388.148641][T16661] veth0: left promiscuous mode
[  388.159785][T16354] netdevsim netdevsim2 netdevsim0: renamed from eth0
[  388.192103][T16354] 8021q: adding VLAN 0 to HW filter on device netdevsim0
[  388.217313][T16354] netdevsim netdevsim2 netdevsim1: renamed from eth1
[  388.276252][T16354] 8021q: adding VLAN 0 to HW filter on device netdevsim1
[  388.293000][T16354] netdevsim netdevsim2 netdevsim2: renamed from eth2
[  388.327089][T16354] 8021q: adding VLAN 0 to HW filter on device netdevsim2
[  388.346501][T16354] netdevsim netdevsim2 netdevsim3: renamed from eth3
[  388.388418][T16354] 8021q: adding VLAN 0 to HW filter on device netdevsim3
[  388.535182][T16680] syzkaller0: entered promiscuous mode
[  388.550578][T16680] syzkaller0: entered allmulticast mode
[  388.682935][ T5638] Bluetooth: hci5: command tx timeout
[  388.751377][T16354] 8021q: adding VLAN 0 to HW filter on device bond0
[  388.887801][T16354] 8021q: adding VLAN 0 to HW filter on device team0
[  388.933528][   T57] bridge0: port 1(bridge_slave_0) entered blocking state
[  388.940688][   T57] bridge0: port 1(bridge_slave_0) entered forwarding state
[  389.006470][ T6000] bridge0: port 2(bridge_slave_1) entered blocking state
[  389.014477][ T6000] bridge0: port 2(bridge_slave_1) entered forwarding state
[  390.818840][T16354] 8021q: adding VLAN 0 to HW filter on device batadv0
[  391.058081][T16354] veth0_vlan: entered promiscuous mode
[  391.065469][T16770] netlink: 'syz.4.2873': attribute type 1 has an invalid length.
[  391.087328][T16354] veth1_vlan: entered promiscuous mode
[  391.219167][T16354] veth0_macvtap: entered promiscuous mode
[  391.264537][T16354] veth1_macvtap: entered promiscuous mode
[  391.381760][T16354] batman_adv: batadv0: Interface activated: batadv_slave_0
[  391.821972][T16354] batman_adv: batadv0: Interface activated: batadv_slave_1
[  391.847519][T16821] __nla_validate_parse: 8 callbacks suppressed
[  391.847537][T16821] netlink: 8 bytes leftover after parsing attributes in process `syz.3.2886'.
[  391.894480][T16821] netlink: 'syz.3.2886': attribute type 29 has an invalid length.
[  391.912387][ T9400] netdevsim netdevsim2 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0
[  391.925758][T16821] netlink: 8 bytes leftover after parsing attributes in process `syz.3.2886'.
[  391.969988][ T9400] netdevsim netdevsim2 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0
[  391.979498][T16824] netlink: 8 bytes leftover after parsing attributes in process `syz.3.2886'.
[  391.979560][T16824] netlink: 'syz.3.2886': attribute type 29 has an invalid length.
[  391.979591][T16824] netlink: 8 bytes leftover after parsing attributes in process `syz.3.2886'.
[  392.011360][ T9400] netdevsim netdevsim2 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0
[  392.082300][ T9400] netdevsim netdevsim2 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0
[  392.180189][T16833] netlink: 72 bytes leftover after parsing attributes in process `syz.4.2889'.
[  392.374606][ T9400] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50
[  392.410938][ T9400] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50
[  392.502064][ T9386] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50
[  392.517521][ T9386] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50
[  392.646372][T16854] openvswitch: netlink: Flow actions may not be safe on all matching packets.
[  392.675253][T16854] openvswitch: netlink: Flow actions may not be safe on all matching packets.
[  392.688963][T16857] netlink: 176 bytes leftover after parsing attributes in process `syz.3.2891'.
[  393.097462][T16877] netlink: 'syz.2.2897': attribute type 1 has an invalid length.
[  393.507246][T16898] netlink: 40 bytes leftover after parsing attributes in process `syz.2.2903'.
[  393.526091][T16898] IPv6: RTM_NEWROUTE with no NLM_F_CREATE or NLM_F_REPLACE
[  393.534186][T16898] IPv6: NLM_F_CREATE should be set when creating new route
[  393.542246][T16898] IPv6: NLM_F_CREATE should be set when creating new route
[  393.550329][T16898] IPv6: NLM_F_CREATE should be set when creating new route
[  393.562198][T16898] IPv6: RTM_NEWROUTE with no NLM_F_CREATE or NLM_F_REPLACE
[  393.914855][T16919] netlink: 12 bytes leftover after parsing attributes in process `syz.3.2912'.
[  394.439856][T16937] syzkaller0: entered promiscuous mode
[  394.461411][T16937] syzkaller0: entered allmulticast mode
[  394.489342][T16937] netlink: 8 bytes leftover after parsing attributes in process `syz.0.2918'.
[  394.621204][T16941] netlink: 16 bytes leftover after parsing attributes in process `syz.4.2920'.
[  394.659581][T16944] syzkaller1: entered promiscuous mode
[  394.673187][T16944] syzkaller1: entered allmulticast mode
[  394.776827][T16944] macvtap0: entered allmulticast mode
[  394.783705][T16944] veth0_macvtap: entered allmulticast mode
[  395.912279][T17003] batadv1: left allmulticast mode
[  395.926320][   T42] IPVS: starting estimator thread 0...
[  395.936931][T17003] batadv1: left promiscuous mode
[  395.955947][T17003] bridge0: port 5(batadv1) entered disabled state
[  396.025240][T17003] bond4: left allmulticast mode
[  396.041016][T17003] bond4: left promiscuous mode
[  396.054348][T17004] IPVS: using max 29 ests per chain, 69600 per kthread
[  396.074028][T17003] bridge0: port 4(bond4) entered disabled state
[  396.121825][T17003] team0: left allmulticast mode
[  396.137493][T17003] team_slave_0: left allmulticast mode
[  396.157981][T17003] team_slave_1: left allmulticast mode
[  396.180465][T17003] bridge1: left allmulticast mode
[  396.201233][T17003] batadv0: left allmulticast mode
[  396.225150][T17003] team0: left promiscuous mode
[  396.237259][T17003] team_slave_0: left promiscuous mode
[  396.258591][T17003] team_slave_1: left promiscuous mode
[  396.275797][T17003] bridge1: left promiscuous mode
[  396.284142][T17003] batadv0: left promiscuous mode
[  396.302213][T17003] bridge0: port 3(team0) entered disabled state
[  396.323934][T17003] bridge_slave_1: left allmulticast mode
[  396.340812][T17003] bridge_slave_1: left promiscuous mode
[  396.360271][T17003] bridge0: port 2(bridge_slave_1) entered disabled state
[  396.379977][T17003] bridge_slave_0: left allmulticast mode
[  396.396973][T17003] bridge_slave_0: left promiscuous mode
[  396.414732][T17003] bridge0: port 1(bridge_slave_0) entered disabled state
[  396.759583][T17042] netlink: zone id is out of range
[  396.850081][T17042] netlink: zone id is out of range
[  396.949841][T17046] __nla_validate_parse: 3 callbacks suppressed
[  396.949887][T17046] netlink: 4 bytes leftover after parsing attributes in process `syz.2.2940'.
[  396.966299][T17042] netlink: zone id is out of range
[  396.966314][T17042] netlink: zone id is out of range
[  396.966324][T17042] netlink: zone id is out of range
[  396.966333][T17042] netlink: zone id is out of range
[  396.966341][T17042] netlink: zone id is out of range
[  396.966350][T17042] netlink: zone id is out of range
[  397.124486][T17053] sctp: [Deprecated]: syz.3.2942 (pid 17053) Use of int in maxseg socket option.
[  397.124486][T17053] Use struct sctp_assoc_value instead
[  397.283850][T17063] netlink: 'syz.0.2945': attribute type 23 has an invalid length.
[  397.387358][T17071] SET target dimension over the limit!
[  397.641709][T17080] xt_hashlimit: size too large, truncated to 1048576
[  397.835187][T17087] netlink: 8 bytes leftover after parsing attributes in process `syz.1.2952'.
[  398.020567][T17093] netlink: 'syz.3.2953': attribute type 1 has an invalid length.
[  398.059493][T17087] bond9: option lacp_strict: mode dependency failed, not supported in mode balance-rr(0)
[  398.124538][T17087] bond9 (unregistering): Released all slaves
[  398.144928][T17098] netlink: 12 bytes leftover after parsing attributes in process `syz.2.2954'.
[  398.190042][T17099] netlink: 12 bytes leftover after parsing attributes in process `syz.1.2952'.
[  398.276288][ T5627] Bluetooth: hci1: unexpected cc 0x0c03 length: 249 > 1
[  398.296361][ T5627] Bluetooth: hci1: unexpected cc 0x1003 length: 249 > 9
[  398.307721][ T5627] Bluetooth: hci1: unexpected cc 0x1001 length: 249 > 9
[  398.318695][ T5627] Bluetooth: hci1: unexpected cc 0x0c23 length: 249 > 4
[  398.327931][ T5627] Bluetooth: hci1: unexpected cc 0x0c38 length: 249 > 2
[  398.415255][T17093] 8021q: adding VLAN 0 to HW filter on device bond7
[  398.607497][T17111] netlink: 'syz.3.2955': attribute type 12 has an invalid length.
[  398.672575][T17111] netlink: 'syz.3.2955': attribute type 29 has an invalid length.
[  398.710438][T17111] netlink: 148 bytes leftover after parsing attributes in process `syz.3.2955'.
[  398.749663][T17111] netlink: 'syz.3.2955': attribute type 1 has an invalid length.
[  398.770166][T17111] netlink: 11 bytes leftover after parsing attributes in process `syz.3.2955'.
[  398.879009][T17114] bridge1: the hash_elasticity option has been deprecated and is always 16
[  399.171309][ T9386] netdevsim netdevsim0 netdevsim3 (unregistering): unset [0, 0] type 1 family 0 port 8472 - 0
[  399.251420][T17132] netlink: 20 bytes leftover after parsing attributes in process `syz.1.2959'.
[  399.285920][T17132] team0: Port device team_slave_0 removed
[  399.437263][ T9386] netdevsim netdevsim0 netdevsim2 (unregistering): unset [0, 0] type 1 family 0 port 8472 - 0
[  399.646095][ T9386] netdevsim netdevsim0 netdevsim1 (unregistering): unset [0, 0] type 1 family 0 port 8472 - 0
[  399.779891][T17155] pimreg3: entered allmulticast mode
[  399.914020][ T9386] batman_adv: batadv0: Removing interface: netdevsim0
[  399.931721][ T9386] netdevsim netdevsim0 netdevsim0 (unregistering): unset [0, 0] type 1 family 0 port 8472 - 0
[  399.967165][T17101] C speed is unknown, defaulting to 1000
[  400.049745][T17101] vxcan1 speed is unknown, defaulting to 1000
[  400.059089][T17174] bond9: (slave lo): enslaved VLAN challenged slave. Adding VLANs will be blocked as long as it is part of bond.
[  400.165362][T17174] bond9: (slave lo): Enslaving as an active interface with an up link
[  400.188909][T17174] net_ratelimit: 5 callbacks suppressed
[  400.189001][T17174] A link change request failed with some changes committed already. Interface tunl0 may have been left with an inconsistent configuration, please check.
[  400.308327][T17183] netlink: 4 bytes leftover after parsing attributes in process `syz.2.2972'.
[  400.366065][ T5627] Bluetooth: hci1: command tx timeout
[  401.006073][ T9386] veth1_to_bridge: left allmulticast mode
[  401.041312][ T9386] veth1_to_bridge: left promiscuous mode
[  401.074638][ T9386] bridge0: port 1(veth1_to_bridge) entered disabled state
[  401.159140][ T9386] dvmrp8: left allmulticast mode
[  401.730771][ T9386] bond1 (unregistering): (slave bridge1): Releasing active interface
[  401.807138][ T9386] .` (unregistering): (slave bond_slave_0): Releasing backup interface
[  401.827709][ T9386] .` (unregistering): Released all slaves
[  401.855295][ T9386] bond1 (unregistering): Released all slaves
[  401.879391][ T9386] bond2 (unregistering): Released all slaves
[  401.903632][ T9386] bond3 (unregistering): Released all slaves
[  401.934345][ T9386] bond0 (unregistering): Released all slaves
[  401.967583][ T9386] bond4 (unregistering): (slave batadv1): Releasing active interface
[  401.981445][ T9386] bond4 (unregistering): Released all slaves
[  402.004408][ T9386] bond5 (unregistering): Released all slaves
[  402.057437][ T5285] 8021q: adding VLAN 0 to HW filter on device eth1
[  402.443747][ T5627] Bluetooth: hci1: command tx timeout
[  402.469921][T17229] xt_CT: No such helper "snmp_trap"
[  402.624655][ T9386] tipc: Disabling bearer <udp:syz2>
[  402.659952][ T9386] tipc: Left network mode
[  402.764583][T17243] netlink: 12 bytes leftover after parsing attributes in process `syz.4.2984'.
[  403.143749][T17270] netlink: 40 bytes leftover after parsing attributes in process `syz.3.2988'.
[  403.531517][T17287] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog
[  403.588475][T17287] x_tables: duplicate underflow at hook 2
[  403.983400][T17101] bridge0: port 1(bridge_slave_0) entered blocking state
[  403.992233][T17101] bridge0: port 1(bridge_slave_0) entered disabled state
[  404.002939][T17101] bridge_slave_0: entered allmulticast mode
[  404.010777][T17101] bridge_slave_0: entered promiscuous mode
[  404.106003][T17101] bridge0: port 2(bridge_slave_1) entered blocking state
[  404.142345][T17101] bridge0: port 2(bridge_slave_1) entered disabled state
[  404.178964][T17101] bridge_slave_1: entered allmulticast mode
[  404.210813][T17101] bridge_slave_1: entered promiscuous mode
[  404.495927][T17101] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link
[  404.522782][ T5627] Bluetooth: hci1: command tx timeout
[  404.590410][T17333] netlink: 'syz.3.3000': attribute type 1 has an invalid length.
[  404.628746][T17101] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link
[  404.678268][T17330] netdevsim netdevsim1 netdevsim0: entered promiscuous mode
[  404.839190][T17333] 8021q: adding VLAN 0 to HW filter on device bond8
[  404.895465][T17350] netlink: 'syz.4.3002': attribute type 1 has an invalid length.
[  404.907918][ T5285] 8021q: adding VLAN 0 to HW filter on device eth2
[  405.017525][T17350] 8021q: adding VLAN 0 to HW filter on device bond12
[  405.109204][T17348] bond12: (slave veth0_to_bond): Enslaving as an active interface with an up link
[  405.156225][T17101] team0: Port device team_slave_0 added
[  405.196263][T17354] macvlan3: entered promiscuous mode
[  405.211327][T17354] macvlan3: entered allmulticast mode
[  405.227581][T17354] bond12: entered promiscuous mode
[  405.234427][T17354] veth0_to_bond: entered promiscuous mode
[  405.246546][T17354] 8021q: adding VLAN 0 to HW filter on device macvlan3
[  405.270993][T17354] bond12: left promiscuous mode
[  405.276607][T17354] veth0_to_bond: left promiscuous mode
[  405.328377][T17101] team0: Port device team_slave_1 added
[  405.637016][T17101] batman_adv: batadv0: Adding interface: batadv_slave_0
[  405.671288][T17101] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem.
[  405.706654][T17385] netlink: 64 bytes leftover after parsing attributes in process `syz.3.3011'.
[  405.788157][T17101] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active
[  405.842342][T17101] batman_adv: batadv0: Adding interface: batadv_slave_1
[  405.886907][T17101] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem.
[  405.938368][T17101] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active
[  405.970967][T17392] netlink: 4096 bytes leftover after parsing attributes in process `syz.4.3014'.
[  406.025572][T17397] netlink: 24 bytes leftover after parsing attributes in process `syz.1.3015'.
[  406.205003][ T9386] hsr_slave_0: left promiscuous mode
[  406.236302][ T9386] hsr_slave_1: left promiscuous mode
[  406.256706][ T9386] batman_adv: batadv0: Removing interface: batadv_slave_0
[  406.296082][ T9386] batman_adv: batadv0: Removing interface: batadv_slave_1
[  406.393660][T17417] netlink: 'syz.1.3018': attribute type 1 has an invalid length.
[  406.605642][ T5627] Bluetooth: hci1: command tx timeout
[  407.091712][ T9386] team0 (unregistering): Port device team_slave_1 removed
[  407.159802][ T9386] team0 (unregistering): Port device team_slave_0 removed
[  407.358467][   T48] smbdirect: ib_dev[syú2] removed
[  407.388370][ T5285] 8021q: adding VLAN 0 to HW filter on device eth3
[  407.423982][T17101] hsr_slave_0: entered promiscuous mode
[  407.442286][T17101] hsr_slave_1: entered promiscuous mode
[  407.464873][T17101] debugfs: 'hsr0' already exists in 'hsr'
[  407.471049][T17101] Cannot create hsr debugfs directory
[  408.023616][ T9386] IPVS: stop unused estimator thread 0...
[  409.245191][T17408] nci: __nci_request: wait_for_completion_interruptible_timeout failed -512
[  409.313780][T17101] netdevsim netdevsim0 netdevsim0: renamed from eth0
[  409.368080][T17101] 8021q: adding VLAN 0 to HW filter on device netdevsim0
[  409.409414][T17101] netdevsim netdevsim0 netdevsim1: renamed from eth1
[  409.466106][T17442] netlink: 140 bytes leftover after parsing attributes in process `syz.3.3021'.
[  409.482392][T17101] 8021q: adding VLAN 0 to HW filter on device netdevsim1
[  409.511272][ T5994] tipc: Subscription rejected, illegal request
[  409.519924][T17442] syzkaller0: entered promiscuous mode
[  409.535474][T17442] syzkaller0: entered allmulticast mode
[  409.553976][T17101] netdevsim netdevsim0 netdevsim2: renamed from eth2
[  409.567953][T17101] 8021q: adding VLAN 0 to HW filter on device netdevsim2
[  409.595710][T17447] veth0_to_bridge: entered promiscuous mode
[  409.638148][T17456] netlink: 'syz.1.3024': attribute type 21 has an invalid length.
[  409.662124][T17456] IPv6: NLM_F_CREATE should be specified when creating new route
[  410.119061][T17101] netdevsim netdevsim0 netdevsim3: renamed from eth3
[  410.133694][T17101] 8021q: adding VLAN 0 to HW filter on device netdevsim3
[  410.196247][T17451] veth0_to_bridge: left promiscuous mode
[  410.444554][T17483] netlink: 'syz.1.3027': attribute type 1 has an invalid length.
[  410.598374][T17483] bond10: entered promiscuous mode
[  410.617457][T17496] netlink: 108 bytes leftover after parsing attributes in process `syz.2.3029'.
[  410.631448][T17483] 8021q: adding VLAN 0 to HW filter on device bond10
[  410.827801][T17101] 8021q: adding VLAN 0 to HW filter on device bond0
[  410.876367][T17504] sctp: [Deprecated]: syz.3.3032 (pid 17504) Use of int in maxseg socket option.
[  410.876367][T17504] Use struct sctp_assoc_value instead
[  410.892101][T17505] netlink: 28 bytes leftover after parsing attributes in process `syz.1.3033'.
[  410.920857][T17505] netlink: 28 bytes leftover after parsing attributes in process `syz.1.3033'.
[  411.051084][T17101] 8021q: adding VLAN 0 to HW filter on device team0
[  411.197922][ T6011] bridge0: port 1(bridge_slave_0) entered blocking state
[  411.205967][ T6011] bridge0: port 1(bridge_slave_0) entered forwarding state
[  411.289570][T17530] netlink: 12 bytes leftover after parsing attributes in process `syz.3.3036'.
[  411.294360][ T6011] bridge0: port 2(bridge_slave_1) entered blocking state
[  411.308318][ T6011] bridge0: port 2(bridge_slave_1) entered forwarding state
[  411.349251][T17530] block nbd3: Unsupported socket: should be TCP or UNIX.
[  411.509992][T17534] netlink: 'syz.2.3038': attribute type 3 has an invalid length.
[  411.756562][T17550] pim6reg: entered allmulticast mode
[  412.725816][T17590] netlink: 84 bytes leftover after parsing attributes in process `syz.3.3052'.
[  412.790559][T17591] netlink: 4 bytes leftover after parsing attributes in process `syz.3.3052'.
[  412.817545][T17590] netlink: 84 bytes leftover after parsing attributes in process `syz.3.3052'.
[  412.830078][T17591] netlink: 4 bytes leftover after parsing attributes in process `syz.3.3052'.
[  413.457318][T17621] sctp: [Deprecated]: syz.2.3058 (pid 17621) Use of int in max_burst socket option deprecated.
[  413.457318][T17621] Use struct sctp_assoc_value instead
[  413.619297][T17101] 8021q: adding VLAN 0 to HW filter on device batadv0
[  413.901381][T17637] netlink: 72 bytes leftover after parsing attributes in process `syz.3.3062'.
[  413.960270][T17101] veth0_vlan: entered promiscuous mode
[  414.016031][T17101] veth1_vlan: entered promiscuous mode
[  414.211391][T17637] syzkaller1: entered promiscuous mode
[  414.244371][T17637] syzkaller1: entered allmulticast mode
[  414.275902][T17101] veth0_macvtap: entered promiscuous mode
[  414.297449][T17637] nbd: illegal input index -8454144
[  414.335182][T17101] veth1_macvtap: entered promiscuous mode
[  414.648975][T17101] batman_adv: batadv0: Interface activated: batadv_slave_0
[  414.689625][T17101] batman_adv: batadv0: Interface activated: batadv_slave_1
[  414.745635][ T5994] netdevsim netdevsim0 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0
[  414.771520][ T5994] netdevsim netdevsim0 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0
[  414.834773][ T5994] netdevsim netdevsim0 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0
[  414.853626][ T5994] netdevsim netdevsim0 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0
[  415.115797][T17683] __nla_validate_parse: 1 callbacks suppressed
[  415.115813][T17683] netlink: 8 bytes leftover after parsing attributes in process `syz.2.3070'.
[  415.168930][ T9400] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50
[  415.195996][T17683] netlink: 'syz.2.3070': attribute type 10 has an invalid length.
[  415.208762][ T9400] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50
[  415.232865][T17683] netlink: 12 bytes leftover after parsing attributes in process `syz.2.3070'.
[  415.311346][T17683] geneve2: entered promiscuous mode
[  415.319842][T17683] geneve2: entered allmulticast mode
[  415.356474][ T5994] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50
[  415.388331][ T5994] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50
[  415.597493][T17703] syzkaller0: entered promiscuous mode
[  415.622947][T17703] syzkaller0: entered allmulticast mode
[  415.642444][T17710] netlink: 24 bytes leftover after parsing attributes in process `syz.1.3078'.
[  415.671926][T17709] x_tables: duplicate underflow at hook 1
[  415.884293][T17715] netlink: 16 bytes leftover after parsing attributes in process `syz.0.3080'.
[  416.174095][ T5638] Bluetooth: hci2: unexpected cc 0x0c03 length: 249 > 1
[  416.191252][ T5638] Bluetooth: hci2: unexpected cc 0x1003 length: 249 > 9
[  416.199649][ T5638] Bluetooth: hci2: unexpected cc 0x1001 length: 249 > 9
[  416.210816][ T5638] Bluetooth: hci2: unexpected cc 0x0c23 length: 249 > 4
[  416.219799][ T5638] Bluetooth: hci2: unexpected cc 0x0c38 length: 249 > 2
[  416.351732][T17732] ÿÿÿÿÿÿ: renamed from vlan1 (while UP)
[  416.748582][T17741] netlink: 596 bytes leftover after parsing attributes in process `syz.2.3083'.
[  417.548445][T17765] netlink: 8 bytes leftover after parsing attributes in process `syz.0.3088'.
[  418.293201][ T5638] Bluetooth: hci2: command tx timeout
[  420.037604][T17804] netlink: 'syz.2.3089': attribute type 10 has an invalid length.
[  420.172177][T17805] netlink: 'syz.2.3089': attribute type 10 has an invalid length.
[  420.199068][T17804] team0: Port device dummy0 added
[  420.340993][T17805] team0: Port device dummy0 removed
[  420.363074][ T5638] Bluetooth: hci2: command tx timeout
[  420.514114][T17818] syzkaller0: entered promiscuous mode
[  420.559865][T17818] syzkaller0: entered allmulticast mode
[  420.650632][T17825] openvswitch: netlink: IP tunnel dst address not specified
[  420.664920][ T5994] netdevsim netdevsim1 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[  420.678222][ T5994] netdevsim netdevsim1 netdevsim3 (unregistering): unset [1, 1] type 2 family 0 port 19999 - 0
[  421.000346][T17835] netlink: 20 bytes leftover after parsing attributes in process `syz.3.3096'.
[  421.032074][ T5994] netdevsim netdevsim1 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[  421.068599][ T5994] netdevsim netdevsim1 netdevsim2 (unregistering): unset [1, 1] type 2 family 0 port 19999 - 0
[  421.182183][T17726] vxcan1 speed is unknown, defaulting to 1000
[  421.299687][T17844] syzkaller0: entered promiscuous mode
[  421.332156][T17844] syzkaller0: entered allmulticast mode
[  421.480866][ T5994] netdevsim netdevsim1 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[  421.535137][ T5994] netdevsim netdevsim1 netdevsim1 (unregistering): unset [1, 1] type 2 family 0 port 19999 - 0
[  422.014855][ T5994] netdevsim netdevsim1 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[  422.026600][ T5994] netdevsim netdevsim1 netdevsim0 (unregistering): unset [1, 1] type 2 family 0 port 19999 - 0
[  422.442878][ T5638] Bluetooth: hci2: command tx timeout
[  422.710620][ T5994] pimreg3: left allmulticast mode
[  423.327110][ T5994] batman_adv: batadv0: Removing interface: gretap1
[  423.578435][ T5994] team0: Port device bridge1 removed
[  423.606293][ T5994] bond1 (unregistering): (slave bridge2): Releasing backup interface
[  423.767680][ T5994] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface
[  423.806456][ T5994] bond0 (unregistering): (slave bond7): Releasing backup interface
[  423.822040][ T5994] bond0 (unregistering): (slave bond8): Releasing backup interface
[  423.846199][ T5994] bond0 (unregistering): Released all slaves
[  423.874705][ T5994] bond1 (unregistering): Released all slaves
[  423.918986][ T5994] bond2 (unregistering): Released all slaves
[  423.965965][ T5994] bond3 (unregistering): Released all slaves
[  424.016830][ T5994] bond4 (unregistering): Released all slaves
[  424.037142][ T5994] bond5 (unregistering): Released all slaves
[  424.069143][ T5994] bond6 (unregistering): (slave batadv2): Releasing active interface
[  424.106126][ T5994] bond6 (unregistering): Released all slaves
[  424.151353][ T5994] bond7 (unregistering): Released all slaves
[  424.197375][ T5994] bond8 (unregistering): Released all slaves
[  424.243209][ T5994] bond9 (unregistering): (slave lo): Releasing backup interface
[  424.261261][ T5994] bond9 (unregistering): (slave lo): last VLAN challenged slave left bond - VLAN blocking is removed
[  424.328822][ T5994] bond9 (unregistering): Released all slaves
[  424.418639][ T5994] bond10 (unregistering): Released all slaves
[  424.535829][ T5638] Bluetooth: hci2: command tx timeout
[  424.883317][T17980] bond1: option tlb_dynamic_lb: mode dependency failed, not supported in mode balance-rr(0)
[  424.908518][T17980] bond1 (unregistering): Released all slaves
[  425.036598][T17994] netlink: 'syz.2.3130': attribute type 4 has an invalid length.
[  425.046582][ T5994] : left promiscuous mode
[  425.271644][ T5994] tipc: Left network mode
[  425.360062][T17726] bridge0: port 1(bridge_slave_0) entered blocking state
[  425.372420][T17726] bridge0: port 1(bridge_slave_0) entered disabled state
[  425.386545][T17726] bridge_slave_0: entered allmulticast mode
[  425.405702][T17726] bridge_slave_0: entered promiscuous mode
[  425.448171][T17996] syzkaller0: entered promiscuous mode
[  425.455463][T17996] syzkaller0: entered allmulticast mode
[  425.467526][T18004] netlink: 164 bytes leftover after parsing attributes in process `syz.0.3133'.
[  425.486518][T18004] netlink: 164 bytes leftover after parsing attributes in process `syz.0.3133'.
[  425.500316][T18004] netlink: 60 bytes leftover after parsing attributes in process `syz.0.3133'.
[  425.616306][T17726] bridge0: port 2(bridge_slave_1) entered blocking state
[  425.638723][T17726] bridge0: port 2(bridge_slave_1) entered disabled state
[  425.659302][T18014] netlink: 24 bytes leftover after parsing attributes in process `syz.4.3135'.
[  425.673763][T17726] bridge_slave_1: entered allmulticast mode
[  425.701336][T17726] bridge_slave_1: entered promiscuous mode
[  425.953304][T18029] xt_TCPMSS: Only works on TCP SYN packets
[  426.065923][T17726] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link
[  426.142365][T18040] 8021q: VLANs not supported on ip6tnl0
[  426.194925][T17726] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link
[  426.339857][T18022] syzkaller1: entered promiscuous mode
[  426.386545][T18022] syzkaller1: entered allmulticast mode
[  426.611858][T17726] team0: Port device team_slave_0 added
[  426.661207][T17726] team0: Port device team_slave_1 added
[  426.897009][T17726] batman_adv: batadv0: Adding interface: batadv_slave_0
[  426.918695][T17726] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem.
[  427.015567][T17726] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active
[  427.074637][T18069] netlink: 'syz.4.3145': attribute type 21 has an invalid length.
[  427.081895][ T5285] 8021q: adding VLAN 0 to HW filter on device eth1
[  427.101277][T18069] IPv6: NLM_F_CREATE should be specified when creating new route
[  427.115680][T17726] batman_adv: batadv0: Adding interface: batadv_slave_1
[  427.133940][T18069] IPv6: RTM_NEWROUTE with no NLM_F_CREATE or NLM_F_REPLACE
[  427.141974][T18069] IPv6: NLM_F_CREATE should be set when creating new route
[  427.150125][T18069] IPv6: NLM_F_CREATE should be set when creating new route
[  427.158157][T18069] IPv6: NLM_F_CREATE should be set when creating new route
[  427.167038][T17726] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem.
[  427.228648][T17726] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active
[  427.287227][ T5994] hsr_slave_0: left promiscuous mode
[  427.294634][ T5994] hsr_slave_1: left promiscuous mode
[  427.304780][ T5994] batman_adv: batadv0: Removing interface: batadv_slave_0
[  427.322220][ T5994] batman_adv: batadv0: Removing interface: batadv_slave_1
[  427.648191][T18088] netlink: 8 bytes leftover after parsing attributes in process `syz.4.3149'.
[  427.679501][ T5994] team0 (unregistering): Port device team_slave_1 removed
[  427.808654][ T5994] team0 (unregistering): Port device batadv0 removed
[  427.919243][T17726] hsr_slave_0: entered promiscuous mode
[  427.943460][T17726] hsr_slave_1: entered promiscuous mode
[  427.966346][T17726] debugfs: 'hsr0' already exists in 'hsr'
[  427.972131][T17726] Cannot create hsr debugfs directory
[  428.268711][T18106] netlink: 576 bytes leftover after parsing attributes in process `syz.2.3154'.
[  428.375949][T18094] netlink: 8 bytes leftover after parsing attributes in process `syz.4.3152'.
[  428.594451][T18094] bond13: option xmit_hash_policy: invalid value (64)
[  428.639086][T18094] bond13 (unregistering): Released all slaves
[  428.870702][ T5994] IPVS: stop unused estimator thread 0...
[  429.172308][T18139] netlink: 28 bytes leftover after parsing attributes in process `syz.4.3161'.
[  429.825506][T18168] netlink: 48 bytes leftover after parsing attributes in process `syz.4.3167'.
[  430.123787][T18178] netlink: 280 bytes leftover after parsing attributes in process `syz.2.3171'.
[  430.642257][T18192] netlink: 4 bytes leftover after parsing attributes in process `syz.3.3174'.
[  430.692113][T18209] syzkaller1: entered promiscuous mode
[  430.706072][T18209] syzkaller1: entered allmulticast mode
[  430.784590][T18200] bridge1: entered promiscuous mode
[  430.809023][T18200] bridge1: entered allmulticast mode
[  430.839623][T17726] netdevsim netdevsim1 netdevsim0: renamed from eth0
[  430.869668][T17726] 8021q: adding VLAN 0 to HW filter on device netdevsim0
[  430.967657][T17726] netdevsim netdevsim1 netdevsim1: renamed from eth1
[  430.987475][T17726] 8021q: adding VLAN 0 to HW filter on device netdevsim1
[  431.005641][T17726] netdevsim netdevsim1 netdevsim2: renamed from eth2
[  431.041511][T17726] 8021q: adding VLAN 0 to HW filter on device netdevsim2
[  431.100196][T17726] netdevsim netdevsim1 netdevsim3: renamed from eth3
[  431.120976][T17726] 8021q: adding VLAN 0 to HW filter on device netdevsim3
[  431.314618][T17726] 8021q: adding VLAN 0 to HW filter on device bond0
[  431.355742][T17726] 8021q: adding VLAN 0 to HW filter on device team0
[  431.382284][ T9390] bridge0: port 1(bridge_slave_0) entered blocking state
[  431.390305][ T9390] bridge0: port 1(bridge_slave_0) entered forwarding state
[  431.436085][   T48] bridge0: port 2(bridge_slave_1) entered blocking state
[  431.444107][   T48] bridge0: port 2(bridge_slave_1) entered forwarding state
[  432.136650][T17726] 8021q: adding VLAN 0 to HW filter on device batadv0
[  432.192109][T17726] veth0_vlan: entered promiscuous mode
[  432.211239][T17726] veth1_vlan: entered promiscuous mode
[  432.261192][T17726] veth0_macvtap: entered promiscuous mode
[  432.274768][T17726] veth1_macvtap: entered promiscuous mode
[  432.297716][T17726] batman_adv: batadv0: Interface activated: batadv_slave_0
[  432.312408][T17726] batman_adv: batadv0: Interface activated: batadv_slave_1
[  432.331210][   T48] netdevsim netdevsim1 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0
[  432.340722][   T48] netdevsim netdevsim1 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0
[  432.351783][   T48] netdevsim netdevsim1 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0
[  432.362150][   T48] netdevsim netdevsim1 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0
[  432.484094][ T9394] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50
[  432.503160][ T9394] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50
[  432.537066][   T48] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50
[  432.545797][   T48] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50
[  432.629020][T18254] netlink: 256 bytes leftover after parsing attributes in process `syz.1.3079'.
[  445.010057][    C0] ip6_tunnel: ip6gre2 xmit: Local address not yet configured!
[  455.734143][T18263] netlink: 'syz.2.3181': attribute type 1 has an invalid length.
[  456.155558][ T5627] Bluetooth: hci0: unexpected cc 0x0c03 length: 249 > 1
[  456.171056][ T5627] Bluetooth: hci0: unexpected cc 0x1003 length: 249 > 9
[  456.188280][ T5627] Bluetooth: hci0: unexpected cc 0x1001 length: 249 > 9
[  456.201075][ T5627] Bluetooth: hci0: unexpected cc 0x0c23 length: 249 > 4
[  456.210735][ T5627] Bluetooth: hci0: unexpected cc 0x0c38 length: 249 > 2
[  456.440127][T18289] syzkaller0: entered promiscuous mode
[  456.489342][T18289] syzkaller0: entered allmulticast mode
[  456.640331][T18309] tipc: Failed to remove unknown binding: 66,0,0/0:363216118/363216120
[  456.676162][T18309] tipc: Failed to remove unknown binding: 66,0,0/0:363216118/363216119
[  456.698373][T18309] tipc: Failed to remove unknown binding: 66,0,0/0:363216118/363216120
[  456.729333][T18309] tipc: Failed to remove unknown binding: 66,0,0/0:363216118/363216119
[  456.759456][T18310] netlink: 12 bytes leftover after parsing attributes in process `syz.0.3190'.
[  457.194791][T18324] pim6reg0: option tlb_dynamic_lb: mode dependency failed, not supported in mode balance-rr(0)
[  457.209123][T18324] pim6reg0 (unregistering): Released all slaves
[  457.304591][ T6011] nci: nci_rf_intf_activated_ntf_packet: unsupported rf_interface 0x23
[  457.478283][T18284] vxcan1 speed is unknown, defaulting to 1000
[  457.491085][T18335] A link change request failed with some changes committed already. Interface lo may have been left with an inconsistent configuration, please check.
[  457.852350][T18336] netlink: 48 bytes leftover after parsing attributes in process `syz.0.3197'.
[  457.899585][T18345] geneve2: entered promiscuous mode
[  457.913023][T18345] geneve2: entered allmulticast mode
[  457.927053][T18345] batman_adv: batadv0: Adding interface: geneve2
[  457.948158][T18345] batman_adv: batadv0: Interface activated: geneve2
[  458.245157][T18365] syzkaller0: entered promiscuous mode
[  458.250810][T18365] syzkaller0: entered allmulticast mode
[  458.283001][ T5638] Bluetooth: hci0: command tx timeout
[  459.085583][T18284] bridge0: port 1(bridge_slave_0) entered blocking state
[  459.103749][T18284] bridge0: port 1(bridge_slave_0) entered disabled state
[  459.112038][T18284] bridge_slave_0: entered allmulticast mode
[  459.128451][T18284] bridge_slave_0: entered promiscuous mode
[  459.179413][T18284] bridge0: port 2(bridge_slave_1) entered blocking state
[  459.206705][T18284] bridge0: port 2(bridge_slave_1) entered disabled state
[  459.226179][T18284] bridge_slave_1: entered allmulticast mode
[  459.275266][T18284] bridge_slave_1: entered promiscuous mode
[  459.481841][T18409] openvswitch: netlink: IPv4 tunnel dst address is zero
[  459.509159][T18284] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link
[  459.570142][T18284] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link
[  459.926645][T18284] team0: Port device team_slave_0 added
[  459.948115][T18422] netlink: 76 bytes leftover after parsing attributes in process `syz.0.3221'.
[  459.979663][T18284] team0: Port device team_slave_1 added
[  460.207731][T18284] batman_adv: batadv0: Adding interface: batadv_slave_0
[  460.257448][T18284] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem.
[  460.314829][T18447] netlink: 'syz.1.3225': attribute type 1 has an invalid length.
[  460.353915][T18458] netlink: 12 bytes leftover after parsing attributes in process `syz.4.3227'.
[  460.366164][ T5638] Bluetooth: hci0: command tx timeout
[  460.400274][T18284] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active
[  460.413131][T18455] netlink: 12 bytes leftover after parsing attributes in process `syz.4.3227'.
[  460.450916][T18284] batman_adv: batadv0: Adding interface: batadv_slave_1
[  460.472433][T18284] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem.
[  460.559229][T18284] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active
[  460.593941][T18447] workqueue: Failed to create a rescuer kthread for wq "bond1": -EINTR
[  460.873339][T18284] hsr_slave_0: entered promiscuous mode
[  460.891461][T18284] hsr_slave_1: entered promiscuous mode
[  460.901649][T18284] debugfs: 'hsr0' already exists in 'hsr'
[  460.918976][T18284] Cannot create hsr debugfs directory
[  460.989932][ T5285] veth1_vlan: left promiscuous mode
[  461.126659][T18482] netlink: 132 bytes leftover after parsing attributes in process `syz.0.3232'.
[  461.425570][T18493] netlink: 12 bytes leftover after parsing attributes in process `syz.0.3237'.
[  462.013407][T18284] netdevsim netdevsim3 netdevsim2 (unregistering): unset [0, 0] type 1 family 0 port 8472 - 0
[  462.029296][T18284] netdevsim netdevsim3 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[  462.043752][T18284] netdevsim netdevsim3 netdevsim2 (unregistering): unset [1, 1] type 2 family 0 port 256 - 0
[  462.072093][T18517] bridge0: adding interface bridge0 with same address as a received packet (addr:aa:aa:aa:aa:aa:1b, vlan:0)
[  462.083988][T18524] ref_ctr_offset mismatch. inode: 0x28 offset: 0x0 ref_ctr_offset(old): 0x0 ref_ctr_offset(new): 0x6
[  462.282274][T18284] netdevsim netdevsim3 netdevsim1 (unregistering): unset [0, 0] type 1 family 0 port 8472 - 0
[  462.296306][T18284] netdevsim netdevsim3 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[  462.309436][T18284] netdevsim netdevsim3 netdevsim1 (unregistering): unset [1, 1] type 2 family 0 port 256 - 0
[  462.311368][T18538] netlink: 'syz.0.3248': attribute type 1 has an invalid length.
[  462.444540][ T5638] Bluetooth: hci0: command tx timeout
[  462.495669][T18284] netdevsim netdevsim3 
 (unregistering): unset [0, 0] type 1 family 0 port 8472 - 0
[  462.506540][T18284] netdevsim netdevsim3 
 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[  462.524241][T18284] netdevsim netdevsim3 
 (unregistering): unset [1, 1] type 2 family 0 port 256 - 0
[  462.569553][T18547] bond1: (slave bridge3): making interface the new active one
[  462.584529][T18547] bond1: (slave bridge3): Enslaving as an active interface with an up link
[  462.937820][T18527] nci: __nci_request: wait_for_completion_interruptible_timeout failed -512
[  463.003852][T18284] netdevsim netdevsim3 netdevsim0: renamed from eth0
[  463.041413][T18284] 8021q: adding VLAN 0 to HW filter on device netdevsim0
[  463.085117][T18284] netdevsim netdevsim3 netdevsim1: renamed from eth1
[  463.146484][T18284] 8021q: adding VLAN 0 to HW filter on device netdevsim1
[  463.197613][T18284] netdevsim netdevsim3 netdevsim2: renamed from eth2
[  463.252289][T18284] 8021q: adding VLAN 0 to HW filter on device netdevsim2
[  463.278574][T18284] netdevsim netdevsim3 netdevsim3: renamed from eth3
[  463.318023][T18576] sctp: [Deprecated]: syz.4.3253 (pid 18576) Use of int in max_burst socket option.
[  463.318023][T18576] Use struct sctp_assoc_value instead
[  463.351166][T18284] 8021q: adding VLAN 0 to HW filter on device netdevsim3
[  463.617319][T18588] netlink: 12 bytes leftover after parsing attributes in process `syz.0.3256'.
[  463.698458][T18588] netlink: 24 bytes leftover after parsing attributes in process `syz.0.3256'.
[  463.750849][T18589] syzkaller1: entered promiscuous mode
[  463.781760][T18589] syzkaller1: entered allmulticast mode
[  463.835565][T18609] netlink: 8 bytes leftover after parsing attributes in process `syz.2.3260'.
[  463.861806][T18610] netlink: 8 bytes leftover after parsing attributes in process `syz.2.3260'.
[  463.965344][T18614] netlink: 36 bytes leftover after parsing attributes in process `syz.4.3262'.
[  464.118773][T18284] 8021q: adding VLAN 0 to HW filter on device bond0
[  464.261293][T18284] 8021q: adding VLAN 0 to HW filter on device team0
[  464.309768][T18627] netlink: 8 bytes leftover after parsing attributes in process `syz.1.3264'.
[  464.312106][ T9400] bridge0: port 1(bridge_slave_0) entered blocking state
[  464.327342][ T9400] bridge0: port 1(bridge_slave_0) entered forwarding state
[  464.361272][T18631] syzkaller0: entered promiscuous mode
[  464.370741][T18631] syzkaller0: entered allmulticast mode
[  464.409406][ T9390] bridge0: port 2(bridge_slave_1) entered blocking state
[  464.416593][ T9390] bridge0: port 2(bridge_slave_1) entered forwarding state
[  464.446902][T18635] netlink: 8 bytes leftover after parsing attributes in process `syz.2.3267'.
[  464.513216][T18631] tipc: Enabled bearer <eth:syzkaller0>, priority 0
[  464.523946][ T5638] Bluetooth: hci0: command tx timeout
[  464.541804][T18630] tipc: Resetting bearer <eth:syzkaller0>
[  464.631956][T18630] tipc: Disabling bearer <eth:syzkaller0>
[  465.247992][T18675] netlink: 40 bytes leftover after parsing attributes in process `syz.1.3275'.
[  465.551413][T18694] bridge: RTM_NEWNEIGH bridge0 with NTF_USE is not supported
[  465.659069][T18284] 8021q: adding VLAN 0 to HW filter on device batadv0
[  465.718226][T18284] veth0_vlan: entered promiscuous mode
[  465.735114][T18284] veth1_vlan: entered promiscuous mode
[  465.778285][T18284] veth0_macvtap: entered promiscuous mode
[  465.789847][T18284] veth1_macvtap: entered promiscuous mode
[  465.813576][T18284] batman_adv: batadv0: Interface activated: batadv_slave_0
[  465.831189][T18284] batman_adv: batadv0: Interface activated: batadv_slave_1
[  465.852096][ T6011] netdevsim netdevsim3 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0
[  465.862749][ T6011] netdevsim netdevsim3 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0
[  465.876017][ T6011] netdevsim netdevsim3 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0
[  465.885158][ T6011] netdevsim netdevsim3 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0
[  468.079107][T18660] nci: __nci_request: wait_for_completion_interruptible_timeout failed -512
[  468.093142][T18697] netlink: 'syz.1.3279': attribute type 11 has an invalid length.
[  468.424180][ T9386] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50
[  468.446165][T18711] netlink: 8 bytes leftover after parsing attributes in process `syz.1.3282'.
[  468.485202][ T9386] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50
[  468.544586][T18711] bond0: entered promiscuous mode
[  468.589292][T18711] bond_slave_0: entered promiscuous mode
[  468.627868][T18711] bond_slave_1: entered promiscuous mode
[  468.662095][T18711] batadv0: entered promiscuous mode
[  468.676064][T18711] 8021q: adding VLAN 0 to HW filter on device hsr1
[  468.692840][T18711] bond0: left promiscuous mode
[  468.698929][T18711] bond_slave_0: left promiscuous mode
[  468.706478][T18711] bond_slave_1: left promiscuous mode
[  468.718690][T18711] batadv0: left promiscuous mode
[  468.862859][ T9390] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50
[  468.882966][ T9390] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50
[  469.096271][T18734] 0: reclassify loop, rule prio 0, protocol 800
[  469.256698][T18744] netlink: 40 bytes leftover after parsing attributes in process `syz.3.3182'.
[  469.300933][T18752] netlink: 8 bytes leftover after parsing attributes in process `syz.0.3289'.
[  469.758597][ T5627] Bluetooth: hci4: unexpected cc 0x0c03 length: 249 > 1
[  469.772112][ T5627] Bluetooth: hci4: unexpected cc 0x1003 length: 249 > 9
[  469.783848][ T5627] Bluetooth: hci4: unexpected cc 0x1001 length: 249 > 9
[  469.797712][ T5627] Bluetooth: hci4: unexpected cc 0x0c23 length: 249 > 4
[  469.807477][ T5627] Bluetooth: hci4: unexpected cc 0x0c38 length: 249 > 2
[  469.957451][ T5622] syz_tun (unregistering): left allmulticast mode
[  470.246942][T18757] vxcan1 speed is unknown, defaulting to 1000
[  470.750542][T18757] bridge0: port 1(bridge_slave_0) entered blocking state
[  470.758189][T18757] bridge0: port 1(bridge_slave_0) entered disabled state
[  470.767486][T18757] bridge_slave_0: entered allmulticast mode
[  470.775370][T18757] bridge_slave_0: entered promiscuous mode
[  470.784169][T18757] bridge0: port 2(bridge_slave_1) entered blocking state
[  470.791368][T18757] bridge0: port 2(bridge_slave_1) entered disabled state
[  470.798964][T18757] bridge_slave_1: entered allmulticast mode
[  470.806696][T18757] bridge_slave_1: entered promiscuous mode
[  470.846843][T18757] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link
[  470.859679][T18757] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link
[  470.901487][T18757] team0: Port device team_slave_0 added
[  470.910269][T18757] team0: Port device team_slave_1 added
[  470.945512][T18757] batman_adv: batadv0: Adding interface: batadv_slave_0
[  470.952468][T18757] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem.
[  470.980839][T18757] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active
[  470.993990][T18757] batman_adv: batadv0: Adding interface: batadv_slave_1
[  471.000964][T18757] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem.
[  471.028807][T18757] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active
[  471.097646][T18757] hsr_slave_0: entered promiscuous mode
[  471.104421][T18757] hsr_slave_1: entered promiscuous mode
[  471.110743][T18757] debugfs: 'hsr0' already exists in 'hsr'
[  471.116974][T18757] Cannot create hsr debugfs directory
[  471.321248][T18757] netdevsim netdevsim4 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[  471.423688][T18757] netdevsim netdevsim4 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[  471.524397][T18757] netdevsim netdevsim4 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[  471.654850][T18757] netdevsim netdevsim4 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[  471.827103][T18757] netdevsim netdevsim4 netdevsim0: renamed from eth0
[  471.837733][T18757] 8021q: adding VLAN 0 to HW filter on device netdevsim0
[  471.845975][T18757] netdevsim netdevsim4 netdevsim1: renamed from eth1
[  471.856462][T18757] 8021q: adding VLAN 0 to HW filter on device netdevsim1
[  471.865111][T18757] netdevsim netdevsim4 netdevsim2: renamed from eth2
[  471.878046][T18757] 8021q: adding VLAN 0 to HW filter on device netdevsim2
[  471.888421][T18757] netdevsim netdevsim4 netdevsim3: renamed from eth3
[  471.897000][ T5638] Bluetooth: hci4: command tx timeout
[  471.910030][T18757] 8021q: adding VLAN 0 to HW filter on device netdevsim3
[  471.999930][T18757] 8021q: adding VLAN 0 to HW filter on device bond0
[  472.023958][T18757] 8021q: adding VLAN 0 to HW filter on device team0
[  472.037042][ T9390] bridge0: port 1(bridge_slave_0) entered blocking state
[  472.045280][ T9390] bridge0: port 1(bridge_slave_0) entered forwarding state
[  472.063750][ T9394] bridge0: port 2(bridge_slave_1) entered blocking state
[  472.070898][ T9394] bridge0: port 2(bridge_slave_1) entered forwarding state
[  472.524990][T18757] 8021q: adding VLAN 0 to HW filter on device batadv0
[  472.802276][T18757] veth0_vlan: entered promiscuous mode
[  472.819086][T18757] veth1_vlan: entered promiscuous mode
[  472.849553][T18757] veth0_macvtap: entered promiscuous mode
[  472.868191][T18757] veth1_macvtap: entered promiscuous mode
[  472.887987][T18757] batman_adv: batadv0: Interface activated: batadv_slave_0
[  472.902893][T18757] batman_adv: batadv0: Interface activated: batadv_slave_1
[  472.920798][ T5994] netdevsim netdevsim4 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0
[  472.931421][ T5994] netdevsim netdevsim4 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0
[  472.941208][ T5994] netdevsim netdevsim4 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0
[  472.950992][ T5994] netdevsim netdevsim4 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0
[  473.058427][ T5994] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50
[  473.071524][ T5994] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50
[  473.120325][   T35] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50
[  473.130529][   T35] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50
[  473.262099][T18800] block nbd4: not configured, cannot reconfigure
[  473.284231][   T29] audit: type=1800 audit(1783666589.371:13): pid=18799 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed comm="syz.4.3292" name="memory.events" dev="tmpfs" ino=18 res=0 errno=0
[  473.963819][ T5638] Bluetooth: hci4: command tx timeout
[  476.044538][ T5638] Bluetooth: hci4: command tx timeout
[  478.123172][ T5638] Bluetooth: hci4: command tx timeout
[  493.281316][T18848] netlink: 'syz.4.3299': attribute type 2 has an invalid length.
[  493.332905][T18848] netlink: 'syz.4.3299': attribute type 8 has an invalid length.
[  493.347682][T18848] netlink: 132 bytes leftover after parsing attributes in process `syz.4.3299'.
[  493.436411][T18855] bond0: (slave ip6gre0): Error: Device can not be enslaved while up
[  493.596101][T18863] netlink: 8 bytes leftover after parsing attributes in process `syz.2.3302'.
[  493.696303][T18872] netlink: 'syz.4.3303': attribute type 3 has an invalid length.
[  493.949749][T18877] pimreg: entered allmulticast mode
[  493.958686][T18877] netlink: 4552 bytes leftover after parsing attributes in process `syz.1.3306'.
[  493.969594][T18877] netlink: 4552 bytes leftover after parsing attributes in process `syz.1.3306'.
[  494.007146][T18883] netlink: 84 bytes leftover after parsing attributes in process `syz.4.3308'.
[  494.196019][T18849] Bluetooth: hci0: Opcode 0x080f failed: -4
[  494.574093][T18904] netlink: 36 bytes leftover after parsing attributes in process `syz.3.3313'.
[  495.251919][T18924] netlink: 71 bytes leftover after parsing attributes in process `syz.4.3319'.
[  495.279050][T18926] IPVS: set_ctl: invalid protocol: 58 0.0.0.0:20000
[  495.306176][T18926] IPVS: set_ctl: invalid protocol: 58 0.0.0.0:20000
[  495.320540][T18926] IPVS: set_ctl: invalid protocol: 58 0.0.0.0:20000
[  495.331434][T18920] netlink: 8 bytes leftover after parsing attributes in process `syz.0.3312'.
[  495.333609][ T5638] Bluetooth: hci0: command 0x080f tx timeout
[  495.370188][T18920] netlink: 8 bytes leftover after parsing attributes in process `syz.0.3312'.
[  495.384740][T18932] netlink: 24 bytes leftover after parsing attributes in process `syz.3.3321'.
[  495.414291][T18926] IPVS: set_ctl: invalid protocol: 58 0.0.0.0:20000
[  495.466304][T18926] IPVS: set_ctl: invalid protocol: 58 0.0.0.0:20000
[  495.513370][T18926] IPVS: set_ctl: invalid protocol: 58 0.0.0.0:20000
[  495.530701][T18926] IPVS: set_ctl: invalid protocol: 58 0.0.0.0:20000
[  495.542458][T18926] IPVS: set_ctl: invalid protocol: 58 0.0.0.0:20000
[  495.559181][T18926] IPVS: set_ctl: invalid protocol: 58 0.0.0.0:20000
[  495.594645][T18926] IPVS: set_ctl: invalid protocol: 58 0.0.0.0:20000
[  495.601709][T18926] IPVS: set_ctl: invalid protocol: 58 0.0.0.0:20000
[  495.616571][T18926] IPVS: set_ctl: invalid protocol: 58 0.0.0.0:20000
[  495.626024][T18926] IPVS: set_ctl: invalid protocol: 58 0.0.0.0:20000
[  495.659624][T18926] IPVS: set_ctl: invalid protocol: 58 0.0.0.0:20000
[  495.685822][T18926] IPVS: set_ctl: invalid protocol: 58 0.0.0.0:20000
[  495.694899][T18926] IPVS: set_ctl: invalid protocol: 58 0.0.0.0:20000
[  495.707903][T18926] IPVS: set_ctl: invalid protocol: 58 0.0.0.0:20000
[  495.715863][T18926] IPVS: set_ctl: invalid protocol: 58 0.0.0.0:20000
[  495.742869][T18926] IPVS: set_ctl: invalid protocol: 58 0.0.0.0:20000
[  495.775223][T18926] IPVS: set_ctl: invalid protocol: 58 0.0.0.0:20000
[  495.781957][T18926] IPVS: set_ctl: invalid protocol: 58 0.0.0.0:20000
[  495.840202][T18926] IPVS: set_ctl: invalid protocol: 58 0.0.0.0:20000
[  495.999858][T18926] IPVS: set_ctl: invalid protocol: 58 0.0.0.0:20000
[  496.011724][T18926] IPVS: set_ctl: invalid protocol: 58 0.0.0.0:20000
[  496.023905][T18926] IPVS: set_ctl: invalid protocol: 58 0.0.0.0:20000
[  496.042244][T18926] IPVS: set_ctl: invalid protocol: 58 0.0.0.0:20000
[  496.066498][T18926] IPVS: set_ctl: invalid protocol: 58 0.0.0.0:20000
[  496.075876][T18926] IPVS: set_ctl: invalid protocol: 58 0.0.0.0:20000
[  496.083031][T18926] IPVS: set_ctl: invalid protocol: 58 0.0.0.0:20000
[  496.099823][T18926] IPVS: set_ctl: invalid protocol: 58 0.0.0.0:20000
[  496.312402][T18962] bridge0: port 2(bridge_slave_1) entered disabled state
[  496.322113][T18962] bridge0: port 1(bridge_slave_0) entered disabled state
[  497.049546][T19008] syzkaller1: entered promiscuous mode
[  497.072903][T19008] syzkaller1: entered allmulticast mode
[  497.200206][T19010] bridge0: port 3(vlan2) entered blocking state
[  497.214004][T19010] bridge0: port 3(vlan2) entered disabled state
[  497.221442][T19010] vlan2: entered allmulticast mode
[  497.231661][T19010] geneve0: entered allmulticast mode
[  497.252133][T19010] vlan2: entered promiscuous mode
[  497.258746][T19010] geneve0: entered promiscuous mode
[  498.061985][T19051] netlink: 'syz.3.3354': attribute type 8 has an invalid length.
[  498.160958][T19055] netlink: 'syz.4.3356': attribute type 8 has an invalid length.
[  498.192019][T19057] netlink: 'syz.2.3357': attribute type 1 has an invalid length.
[  498.279539][T19063] bond2: (slave geneve3): making interface the new active one
[  498.290761][T19063] bond2: (slave geneve3): Enslaving as an active interface with an up link
[  498.304935][ T9390] netdevsim netdevsim2 netdevsim0: set [1, 1] type 2 family 0 port 20004 - 0
[  498.315989][   T42] IPVS: starting estimator thread 0...
[  498.330885][ T9390] netdevsim netdevsim2 netdevsim1: set [1, 1] type 2 family 0 port 20004 - 0
[  498.386900][ T9390] netdevsim netdevsim2 netdevsim2: set [1, 1] type 2 family 0 port 20004 - 0
[  498.393787][T19069] __nla_validate_parse: 18 callbacks suppressed
[  498.393819][T19069] netlink: 12 bytes leftover after parsing attributes in process `syz.3.3359'.
[  498.413003][T19064] IPVS: using max 31 ests per chain, 74400 per kthread
[  498.429440][ T9390] netdevsim netdevsim2 netdevsim3: set [1, 1] type 2 family 0 port 20004 - 0
[  498.589450][T19069] macvlan2: entered promiscuous mode
[  498.605790][T19069] macvlan2: entered allmulticast mode
[  498.627328][T19080] netlink: 32 bytes leftover after parsing attributes in process `syz.2.3362'.
[  498.647813][T19083] Bluetooth: MGMT ver 1.23
[  498.799152][T19088] netlink: 28 bytes leftover after parsing attributes in process `syz.1.3365'.
[  498.967690][T19098] netlink: 'syz.1.3367': attribute type 1 has an invalid length.
[  498.976441][T19098] netlink: 16179 bytes leftover after parsing attributes in process `syz.1.3367'.
[  499.089600][T19102] netlink: 80 bytes leftover after parsing attributes in process `syz.2.3370'.
[  499.157727][T19102] netlink: 80 bytes leftover after parsing attributes in process `syz.2.3370'.
[  499.174287][T19104] netlink: 28 bytes leftover after parsing attributes in process `syz.1.3372'.
[  499.192664][T19104] netlink: 'syz.1.3372': attribute type 7 has an invalid length.
[  499.200818][T19104] netlink: 'syz.1.3372': attribute type 8 has an invalid length.
[  499.213028][T19102] netlink: 80 bytes leftover after parsing attributes in process `syz.2.3370'.
[  499.222192][T19104] netlink: 4 bytes leftover after parsing attributes in process `syz.1.3372'.
[  499.300136][T19102] netlink: 80 bytes leftover after parsing attributes in process `syz.2.3370'.
[  499.547383][T19114] IPVS: set_ctl: invalid protocol: 46 127.0.0.1:20001
[  499.578280][T19118] netlink: 'syz.1.3375': attribute type 2 has an invalid length.
[  499.596497][T19118] netlink: 'syz.1.3375': attribute type 1 has an invalid length.
[  499.917864][T19126] netlink: 'syz.1.3378': attribute type 10 has an invalid length.
[  499.966670][T19126] bond0: (slave dummy0): Enslaving as an active interface with an up link
[  500.685158][ T5627] Bluetooth: hci0: command 0x080f tx timeout
[  500.691759][ T5638] Bluetooth: hci0: Opcode 0x0c1a failed: -110
[  501.373129][T19075] nci: __nci_request: wait_for_completion_interruptible_timeout failed -512
[  501.678516][T19147] syz_tun: entered allmulticast mode
[  501.769093][T19145] syz_tun: left allmulticast mode
[  502.344463][T19182] netlink: 'syz.3.3395': attribute type 2 has an invalid length.
[  502.369847][T19183] netlink: 'syz.2.3397': attribute type 15 has an invalid length.
[  502.394985][T19182] netlink: 'syz.3.3395': attribute type 2 has an invalid length.
[  502.416313][T19187] atomic_op ffff88802a58d998 conn xmit_atomic 0000000000000000
[  502.469589][T19183] netlink: 'syz.2.3397': attribute type 15 has an invalid length.
[  502.473312][ T9400] netdevsim netdevsim2 netdevsim0: set [0, 0] type 1 family 0 port 256 - 0
[  502.504309][ T9400] netdevsim netdevsim2 netdevsim1: set [0, 0] type 1 family 0 port 256 - 0
[  502.600147][ T9400] netdevsim netdevsim2 netdevsim2: set [0, 0] type 1 family 0 port 256 - 0
[  502.662699][ T9400] netdevsim netdevsim2 netdevsim3: set [0, 0] type 1 family 0 port 256 - 0
[  503.309314][T19227] tipc: Started in network mode
[  503.326389][T19227] tipc: Node identity , cluster identity 4711
[  503.344085][T19227] tipc: Failed to set node id, please configure manually
[  503.368828][T19227] tipc: Enabling of bearer <udp:syz2> rejected, failed to enable media
[  503.410042][T19226] tipc: Started in network mode
[  503.427973][T19226] tipc: Node identity , cluster identity 4711
[  503.444234][T19226] tipc: Failed to set node id, please configure manually
[  503.458910][T19226] tipc: Enabling of bearer <udp:syz2> rejected, failed to enable media
[  503.741734][T19243] __nla_validate_parse: 75 callbacks suppressed
[  503.741753][T19243] netlink: 12 bytes leftover after parsing attributes in process `syz.4.3413'.
[  504.331507][T19278] IPv6: NLM_F_CREATE should be specified when creating new route
[  504.357840][T19278] IPv6: RTM_NEWROUTE with no NLM_F_CREATE or NLM_F_REPLACE
[  504.365164][T19278] IPv6: NLM_F_CREATE should be set when creating new route
[  504.404677][T19278] validate_nla: 3 callbacks suppressed
[  504.404692][T19278] netlink: 'syz.4.3424': attribute type 32 has an invalid length.
[  504.503272][T19285] netlink: 'syz.1.3427': attribute type 10 has an invalid length.
[  504.601374][T19288] netlink: 'syz.2.3429': attribute type 11 has an invalid length.
[  504.619989][T19292] sit0: entered promiscuous mode
[  504.635152][T19292] netlink: 'syz.3.3428': attribute type 1 has an invalid length.
[  504.644431][T19292] netlink: 1 bytes leftover after parsing attributes in process `syz.3.3428'.
[  504.659630][T19292] openvswitch: netlink: IP tunnel TTL not specified.
[  504.671759][T19292] netlink: 8 bytes leftover after parsing attributes in process `syz.3.3428'.
[  505.131460][T19318] bridge0: port 2(bridge_slave_1) entered disabled state
[  505.139067][T19318] bridge0: port 1(bridge_slave_0) entered disabled state
[  505.222903][T19324] ipt_ECN: cannot use operation on non-tcp rule
[  505.244304][T19326] syzkaller0: entered promiscuous mode
[  505.249867][T19326] syzkaller0: entered allmulticast mode
[  505.603708][T19336] netlink: 4 bytes leftover after parsing attributes in process `syz.1.3443'.
[  505.631712][T19336] netlink: 12 bytes leftover after parsing attributes in process `syz.1.3443'.
[  506.676210][T19368] netlink: 'syz.4.3450': attribute type 1 has an invalid length.
[  506.949223][T19368] 8021q: adding VLAN 0 to HW filter on device bond1
[  507.148564][T19384] nbd: couldn't find a device at index 0
[  507.166472][T19370] bond1: (slave syz_tun): Enslaving as a backup interface with an up link
[  507.307468][T19387] syzkaller0: entered promiscuous mode
[  507.324542][T19387] syzkaller0: entered allmulticast mode
[  508.104973][T19427] netlink: 120 bytes leftover after parsing attributes in process `syz.0.3467'.
[  508.145055][T19433] netlink: 4 bytes leftover after parsing attributes in process `syz.3.3470'.
[  508.354771][T19443] netlink: 12 bytes leftover after parsing attributes in process `syz.4.3472'.
[  508.377259][T19443] netlink: 56 bytes leftover after parsing attributes in process `syz.4.3472'.
[  508.392714][T19443] netlink: 8 bytes leftover after parsing attributes in process `syz.4.3472'.
[  508.827592][T19464] __nla_validate_parse: 1 callbacks suppressed
[  508.827608][T19464] netlink: 148 bytes leftover after parsing attributes in process `syz.4.3480'.
[  508.861178][T19464] xt_addrtype: ipv6 PROHIBIT (THROW, NAT ..) matching not supported
[  508.957659][T19470] xt_AUDIT: Audit type out of range (valid range: 0..2)
[  508.984661][T19470] netlink: 12 bytes leftover after parsing attributes in process `syz.3.3481'.
[  509.018431][T19470] netlink: 104 bytes leftover after parsing attributes in process `syz.3.3481'.
[  509.047481][T19474] netlink: 24 bytes leftover after parsing attributes in process `syz.1.3482'.
[  509.413130][T19495] openvswitch: netlink: Flow actions may not be safe on all matching packets.
[  509.526844][T19495] tipc: Started in network mode
[  509.554925][T19495] tipc: Node identity 52c951be7c2c, cluster identity 4711
[  509.596773][T19495] tipc: Enabled bearer <eth:syzkaller0>, priority 0
[  509.640854][T19495] netlink: 'syz.4.3487': attribute type 12 has an invalid length.
[  509.684569][T19495] netlink: 'syz.4.3487': attribute type 29 has an invalid length.
[  509.712737][T19495] netlink: 148 bytes leftover after parsing attributes in process `syz.4.3487'.
[  509.732031][T19495] netlink: 51 bytes leftover after parsing attributes in process `syz.4.3487'.
[  509.807260][T19494] tipc: Disabling bearer <eth:syzkaller0>
[  509.862021][T19514] syzkaller0: entered promiscuous mode
[  509.871737][T19514] syzkaller0: entered allmulticast mode
[  509.900778][T19522] netlink: 8 bytes leftover after parsing attributes in process `syz.1.3494'.
[  510.233125][T19539] netlink: 24 bytes leftover after parsing attributes in process `syz.0.3497'.
[  510.286127][T19540] netlink: 16 bytes leftover after parsing attributes in process `syz.0.3497'.
[  510.316817][T19527] netlink: 8 bytes leftover after parsing attributes in process `syz.2.3495'.
[  510.734286][T19570] netlink: 'syz.3.3504': attribute type 21 has an invalid length.
[  510.800912][ T9386] netdevsim netdevsim3 netdevsim0: set [0, 0] type 1 family 0 port 8472 - 0
[  510.824471][ T9386] netdevsim netdevsim3 netdevsim1: set [0, 0] type 1 family 0 port 8472 - 0
[  510.856813][ T9386] netdevsim netdevsim3 netdevsim2: set [0, 0] type 1 family 0 port 8472 - 0
[  510.886374][ T9386] netdevsim netdevsim3 netdevsim3: set [0, 0] type 1 family 0 port 8472 - 0
[  511.209959][T19597] ip6t_REJECT: TCP_RESET illegal for non-tcp
[  511.619359][T19611] nci: __nci_request: wait_for_completion_interruptible_timeout failed -512
[  511.671997][T19612] nci: __nci_request: wait_for_completion_interruptible_timeout failed -512
[  512.043866][ T5638] Bluetooth: hci0: command 0x080f tx timeout
[  512.270948][T19649] syz.3.3529 (19649) used obsolete PPPIOCDETACH ioctl
[  512.277970][T19653] netlink: 'syz.4.3530': attribute type 10 has an invalid length.
[  512.293470][T19654] netlink: 'syz.2.3531': attribute type 10 has an invalid length.
[  512.301561][T19653] batman_adv: batadv0: Interface deactivated: batadv_slave_0
[  512.313428][T19657] netlink: 'syz.1.3533': attribute type 29 has an invalid length.
[  512.322661][T19653] batman_adv: batadv0: Removing interface: batadv_slave_0
[  512.342131][T19653] batman_adv: batadv0: Interface deactivated: batadv_slave_1
[  512.359424][T19653] batman_adv: batadv0: Removing interface: batadv_slave_1
[  512.645894][T19666] netlink: zone id is out of range
[  512.656028][T19666] netlink: zone id is out of range
[  512.676314][T19666] netlink: zone id is out of range
[  512.682405][T19666] netlink: zone id is out of range
[  512.721015][T19666] netlink: zone id is out of range
[  512.724408][T19677] tipc: Enabled bearer <eth:syzkaller0>, priority 0
[  512.734999][T19666] netlink: zone id is out of range
[  512.768816][T19676] syzkaller0: entered promiscuous mode
[  512.787569][T19666] netlink: zone id is out of range
[  512.803446][T19676] syzkaller0: entered allmulticast mode
[  512.811222][T19666] netlink: zone id is out of range
[  512.820265][T19666] netlink: zone id is out of range
[  512.830724][T19666] netlink: zone id is out of range
[  512.905671][T19677] tipc: Resetting bearer <eth:syzkaller0>
[  513.105350][T19677] tipc: Disabling bearer <eth:syzkaller0>
[  513.278990][T19693] bond2: peer notification delay (25) is not a multiple of miimon (17413), value rounded to 0 ms
[  513.327908][T19693] bond2: option ad_user_port_key: mode dependency failed, not supported in mode balance-rr(0)
[  513.362171][T19693] bond2 (unregistering): Released all slaves
[  513.535901][T19710] bond1: option min_links: invalid value (18446744073709551614)
[  513.581967][T19710] bond1: option min_links: allowed values 0 - 2147483647
[  513.616229][T19710] bond1 (unregistering): Released all slaves
[  514.062399][T19748] xt_recent: hitcount (4294901760) is larger than allowed maximum (65535)
[  514.277506][T19762] Cannot find add_set index 46338 as target
[  514.515394][T19771] batman_adv: Cannot find parent device. Skipping batadv-on-batadv check for gretap1
[  514.562070][T19771] gretap1: default qdisc (pfifo_fast) fail, fallback to noqueue
[  514.604841][T19771] gretap1: entered promiscuous mode
[  514.626133][T19771] gretap1: entered allmulticast mode
[  514.934393][ T8180] IPVS: starting estimator thread 0...
[  514.941508][T19790] IPVS: set_ctl: invalid protocol: 60 172.20.20.187:20004
[  514.965330][T19784] Can't find ip_set type hAsh:ip,mac
[  515.067467][T19792] IPVS: using max 26 ests per chain, 62400 per kthread
[  515.341587][T19812] __nla_validate_parse: 14 callbacks suppressed
[  515.341619][T19812] netlink: 20 bytes leftover after parsing attributes in process `syz.0.3578'.
[  515.474985][T19812] team0: Port device team_slave_0 removed
[  515.741383][T19821] 8021q: adding VLAN 0 to HW filter on device ipvlan2
[  515.776585][T19821] bond0: (slave ipvlan2): enslaved VLAN challenged slave. Adding VLANs will be blocked as long as it is part of bond.
[  515.808975][T19822] netlink: 'syz.2.3580': attribute type 3 has an invalid length.
[  516.139902][T19855] netlink: 40 bytes leftover after parsing attributes in process `syz.0.3587'.
[  516.408763][T19871] netlink: 'syz.4.3591': attribute type 7 has an invalid length.
[  516.955889][T19888] netlink: 64 bytes leftover after parsing attributes in process `syz.1.3597'.
[  517.745486][T19909] netlink: 20 bytes leftover after parsing attributes in process `syz.2.3602'.
[  517.760063][T19909] netlink: 24 bytes leftover after parsing attributes in process `syz.2.3602'.
[  517.845908][T19912] netlink: 20 bytes leftover after parsing attributes in process `syz.2.3602'.
[  517.859684][T19912] netlink: 24 bytes leftover after parsing attributes in process `syz.2.3602'.
[  518.056517][T19922] netlink: 20 bytes leftover after parsing attributes in process `syz.3.3605'.
[  518.090980][T19923] netlink: 'syz.2.3604': attribute type 8 has an invalid length.
[  518.106599][T19907] Cannot find del_set index 4 as target
[  518.366126][T19930] net_ratelimit: 7 callbacks suppressed
[  518.366144][T19930] openvswitch: netlink: Flow actions may not be safe on all matching packets.
[  518.433175][T19935] netlink: 8 bytes leftover after parsing attributes in process `syz.4.3610'.
[  518.446279][T19935] netlink: 4 bytes leftover after parsing attributes in process `syz.4.3610'.
[  518.926743][T19964] netlink: 'syz.3.3617': attribute type 1 has an invalid length.
[  518.942133][T19964] workqueue: Failed to create a rescuer kthread for wq "bond1": -EINTR
[  519.218092][T19982] netlink: 'syz.4.3620': attribute type 1 has an invalid length.
[  519.568993][T19994] bond4: (slave veth3): Enslaving as an active interface with a down link
[  519.596765][T19982] bond4: entered allmulticast mode
[  519.636592][T19982] netlink: zone id is out of range
[  519.674785][T19982] netlink: zone id is out of range
[  519.691536][T19982] netlink: zone id is out of range
[  519.713329][T19982] netlink: zone id is out of range
[  519.719665][T19982] netlink: zone id is out of range
[  519.726068][T19982] netlink: zone id is out of range
[  519.731933][T19982] netlink: zone id is out of range
[  519.738422][T19982] netlink: zone id is out of range
[  519.746383][T19982] netlink: zone id is out of range
[  519.801974][T20015] netlink: 'syz.3.3626': attribute type 7 has an invalid length.
[  519.846561][T20016] netlink: 'syz.2.3627': attribute type 7 has an invalid length.
[  519.953710][T20023] netlink: 'syz.0.3628': attribute type 7 has an invalid length.
[  520.406446][T20007] Bluetooth: hci1: Opcode 0x0401 failed: -4
[  520.426827][T20008] Bluetooth: hci1: Opcode 0x0401 failed: -4
[  520.697225][T20060] __nla_validate_parse: 6 callbacks suppressed
[  520.697244][T20060] netlink: 10 bytes leftover after parsing attributes in process `syz.1.3639'.
[  520.731812][ T5638] Bluetooth: hci4: link tx timeout
[  520.745775][ T5638] Bluetooth: hci4: killing stalled connection 11:aa:aa:aa:aa:aa
[  520.765094][T20059] syzkaller0: entered allmulticast mode
[  520.809773][T20059] netlink: 28 bytes leftover after parsing attributes in process `syz.0.3640'.
[  520.913048][T20071] netlink: 4 bytes leftover after parsing attributes in process `syz.3.3643'.
[  520.949467][T20064] netlink: 60 bytes leftover after parsing attributes in process `syz.2.3641'.
[  520.950252][ T5627] Bluetooth: hci4: link tx timeout
[  520.965607][ T5627] Bluetooth: hci4: killing stalled connection 11:aa:aa:aa:aa:aa
[  520.988564][ T5627] Bluetooth: hci4: link tx timeout
[  520.994357][ T5627] Bluetooth: hci4: killing stalled connection 11:aa:aa:aa:aa:aa
[  521.221809][T20081] netlink: 32 bytes leftover after parsing attributes in process `syz.1.3644'.
[  521.223872][ T5627] Bluetooth: hci4: link tx timeout
[  521.236448][ T5627] Bluetooth: hci4: killing stalled connection 11:aa:aa:aa:aa:aa
[  521.648703][ T5627] Bluetooth: hci1: command 0x0401 tx timeout
[  521.703156][T20100] netlink: 8 bytes leftover after parsing attributes in process `syz.1.3648'.
[  521.750186][T20104] netlink: 'syz.0.3649': attribute type 10 has an invalid length.
[  521.792123][T20104] netlink: 40 bytes leftover after parsing attributes in process `syz.0.3649'.
[  521.818074][T20113] Bluetooth: hci4: link tx timeout
[  521.824598][T20113] Bluetooth: hci4: killing stalled connection 11:aa:aa:aa:aa:aa
[  521.839275][T20104] team0: entered allmulticast mode
[  521.853281][T20104] team_slave_1: entered allmulticast mode
[  521.906162][T20104] bridge0: port 3(team0) entered blocking state
[  521.935060][T20104] bridge0: port 3(team0) entered disabled state
[  521.995304][T20104] team0: entered promiscuous mode
[  522.034576][T20104] team_slave_1: entered promiscuous mode
[  522.267619][T20134] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium
[  522.551260][T20148] netlink: 8 bytes leftover after parsing attributes in process `syz.1.3660'.
[  522.610865][T20152] netlink: 'syz.2.3662': attribute type 2 has an invalid length.
[  522.652990][T20152] netlink: 'syz.2.3662': attribute type 8 has an invalid length.
[  522.684331][T20152] netlink: 132 bytes leftover after parsing attributes in process `syz.2.3662'.
[  522.845184][ T5638] Bluetooth: hci4: command 0x0406 tx timeout
[  523.278831][T20188] netlink: 8 bytes leftover after parsing attributes in process `syz.0.3671'.
[  523.629045][T20194] Cannot find del_set index 32768 as target
[  523.726803][ T5638] Bluetooth: hci1: command 0x0401 tx timeout
[  523.879908][T20208] tipc: Enabling of bearer <dth:sy> rejected, media not registered
[  524.041657][T20216] xt_CT: You must specify a L4 protocol and not use inversions on it
[  524.631498][T20254] netlink: 'syz.3.3689': attribute type 2 has an invalid length.
[  524.924929][T20265] syzkaller0: entered promiscuous mode
[  524.934663][T20265] syzkaller0: entered allmulticast mode
[  524.953582][T20265] net_ratelimit: 80 callbacks suppressed
[  524.953598][T20265] TC_ACT_REPEAT abuse ?
[  525.327804][    C1] ==================================================================
[  525.335954][    C1] BUG: KASAN: use-after-free in qdisc_pkt_len_segs_init+0x7f7/0xa30
[  525.343994][    C1] Read of size 2 at addr ffff88817a141db4 by task syz.2.3700/20283
[  525.351914][    C1] 
[  525.354272][    C1] CPU: 1 UID: 0 PID: 20283 Comm: syz.2.3700 Not tainted syzkaller #0 PREEMPT(full) 
[  525.354299][    C1] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 05/09/2026
[  525.354306][    C1] Call Trace:
[  525.354312][    C1]  <IRQ>
[  525.354316][    C1]  dump_stack_lvl+0xe8/0x150
[  525.354339][    C1]  print_address_description+0x55/0x1e0
[  525.354363][    C1]  ? qdisc_pkt_len_segs_init+0x7f7/0xa30
[  525.354374][    C1]  print_report+0x58/0x70
[  525.354387][    C1]  kasan_report+0x117/0x150
[  525.354412][    C1]  ? qdisc_pkt_len_segs_init+0x7f7/0xa30
[  525.354424][    C1]  qdisc_pkt_len_segs_init+0x7f7/0xa30
[  525.354437][    C1]  __netif_receive_skb_core+0x13aa/0x30b0
[  525.354486][    C1]  ? __pfx___netif_receive_skb_core+0x10/0x10
[  525.354497][    C1]  ? __lock_acquire+0x683/0x2cf0
[  525.354519][    C1]  ? lock_acquire+0x106/0x350
[  525.354533][    C1]  ? __lock_acquire+0x683/0x2cf0
[  525.354548][    C1]  __netif_receive_skb_list_core+0x24d/0x830
[  525.354562][    C1]  ? __pfx___netif_receive_skb_list_core+0x10/0x10
[  525.354575][    C1]  ? ktime_expiry_to_cycles+0x4e/0x1e0
[  525.354596][    C1]  netif_receive_skb_list_internal+0x995/0xcf0
[  525.354608][    C1]  ? netif_receive_skb_list_internal+0x501/0xcf0
[  525.354619][    C1]  ? __pfx_netif_receive_skb_list_internal+0x10/0x10
[  525.354630][    C1]  ? dev_gro_receive+0x1097/0x2380
[  525.354678][    C1]  napi_complete_done+0x299/0x730
[  525.354690][    C1]  ? __pfx_napi_complete_done+0x10/0x10
[  525.354702][    C1]  ? gro_cell_poll+0x175/0x5d0
[  525.354740][    C1]  gro_cell_poll+0x5ab/0x5d0
[  525.354756][    C1]  ? gro_cell_poll+0x175/0x5d0
[  525.354768][    C1]  __napi_poll+0xaa/0x330
[  525.354780][    C1]  net_rx_action+0x61d/0xf50
[  525.354794][    C1]  ? __pfx_net_rx_action+0x10/0x10
[  525.354805][    C1]  ? xfrm_dev_backlog+0x24b/0x3c0
[  525.354860][    C1]  handle_softirqs+0x225/0x840
[  525.354883][    C1]  ? do_softirq+0x76/0xd0
[  525.354895][    C1]  ? tun_rx_batched+0x185/0x790
[  525.354949][    C1]  do_softirq+0x76/0xd0
[  525.354960][    C1]  </IRQ>
[  525.354964][    C1]  <TASK>
[  525.354967][    C1]  __local_bh_enable_ip+0xf8/0x130
[  525.354978][    C1]  ? tun_rx_batched+0x185/0x790
[  525.354990][    C1]  tun_rx_batched+0x616/0x790
[  525.355004][    C1]  ? __pfx_tun_rx_batched+0x10/0x10
[  525.355019][    C1]  ? tun_get_user+0x2717/0x4370
[  525.355031][    C1]  ? tun_get_user+0x2717/0x4370
[  525.355047][    C1]  ? tun_get_user+0x23cb/0x4370
[  525.355068][    C1]  ? tun_get_user+0x23cb/0x4370
[  525.355090][    C1]  ? __local_bh_enable_ip+0xd0/0x130
[  525.355110][    C1]  ? tun_get_user+0x2717/0x4370
[  525.355131][    C1]  ? tun_get_user+0x2717/0x4370
[  525.355154][    C1]  tun_get_user+0x2b44/0x4370
[  525.355184][    C1]  ? aa_file_perm+0x18b/0x15f0
[  525.355243][    C1]  ? aa_file_perm+0x4ed/0x15f0
[  525.355253][    C1]  ? __pfx_tun_get_user+0x10/0x10
[  525.355265][    C1]  ? __lock_acquire+0x683/0x2cf0
[  525.355279][    C1]  ? __pfx___futex_wait+0x10/0x10
[  525.355298][    C1]  ? ref_tracker_alloc+0x341/0x4b0
[  525.355339][    C1]  ? __pfx_ref_tracker_alloc+0x10/0x10
[  525.355351][    C1]  ? tun_get+0x1c/0x2f0
[  525.355362][    C1]  ? tun_get+0x1c/0x2f0
[  525.355374][    C1]  ? tun_get+0x1c/0x2f0
[  525.355385][    C1]  ? tun_get+0x1c/0x2f0
[  525.355397][    C1]  tun_chr_write_iter+0x113/0x200
[  525.355410][    C1]  vfs_write+0x612/0xba0
[  525.355426][    C1]  ? __pfx_vfs_write+0x10/0x10
[  525.355442][    C1]  ? __fget_files+0x2a/0x420
[  525.355458][    C1]  ksys_write+0x150/0x270
[  525.355472][    C1]  ? __pfx_ksys_write+0x10/0x10
[  525.355487][    C1]  ? entry_SYSCALL_64_after_hwframe+0x77/0x7f
[  525.355516][    C1]  do_syscall_64+0x174/0x580
[  525.355531][    C1]  ? trace_irq_disable+0x3b/0x140
[  525.355544][    C1]  ? clear_bhb_loop+0x40/0x90
[  525.355555][    C1]  entry_SYSCALL_64_after_hwframe+0x77/0x7f
[  525.355565][    C1] RIP: 0033:0x7f431539de59
[  525.355576][    C1] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48
[  525.355586][    C1] RSP: 002b:00007f4316258028 EFLAGS: 00000246 ORIG_RAX: 0000000000000001
[  525.355598][    C1] RAX: ffffffffffffffda RBX: 00007f4315625fa0 RCX: 00007f431539de59
[  525.355606][    C1] RDX: 000000000000fdef RSI: 0000200000000440 RDI: 0000000000000005
[  525.355612][    C1] RBP: 00007f4315433e6f R08: 0000000000000000 R09: 0000000000000000
[  525.355619][    C1] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000
[  525.355625][    C1] R13: 00007f4315626038 R14: 00007f4315625fa0 R15: 00007fff299039c8
[  525.355636][    C1]  </TASK>
[  525.355640][    C1] 
[  525.792650][    C1] The buggy address belongs to the physical page:
[  525.799067][    C1] page: refcount:0 mapcount:0 mapping:0000000000000000 index:0x0 pfn:0x17a141
[  525.807894][    C1] flags: 0x57ff00000000000(node=1|zone=2|lastcpupid=0x7ff)
[  525.815082][    C1] raw: 057ff00000000000 ffffea0005e85048 ffffea0005e85048 0000000000000000
[  525.823646][    C1] raw: 0000000000000000 0000000000000000 00000000ffffffff 0000000000000000
[  525.832203][    C1] page dumped because: kasan: bad access detected
[  525.838605][    C1] page_owner info is not present (never set?)
[  525.844645][    C1] 
[  525.846947][    C1] Memory state around the buggy address:
[  525.852557][    C1]  ffff88817a141c80: ff ff ff ff ff ff ff ff ff ff ff ff ff ff ff ff
[  525.860605][    C1]  ffff88817a141d00: ff ff ff ff ff ff ff ff ff ff ff ff ff ff ff ff
[  525.868646][    C1] >ffff88817a141d80: ff ff ff ff ff ff ff ff ff ff ff ff ff ff ff ff
[  525.876683][    C1]                                      ^
[  525.882290][    C1]  ffff88817a141e00: ff ff ff ff ff ff ff ff ff ff ff ff ff ff ff ff
[  525.890330][    C1]  ffff88817a141e80: ff ff ff ff ff ff ff ff ff ff ff ff ff ff ff ff
[  525.898368][    C1] ==================================================================
[  525.936392][    C1] Kernel panic - not syncing: KASAN: panic_on_warn set ...
[  525.943600][    C1] CPU: 1 UID: 0 PID: 20283 Comm: syz.2.3700 Not tainted syzkaller #0 PREEMPT(full) 
[  525.952953][    C1] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 05/09/2026
[  525.962995][    C1] Call Trace:
[  525.966258][    C1]  <IRQ>
[  525.969085][    C1]  vpanic+0x56c/0xa60
[  525.973065][    C1]  ? __pfx_vpanic+0x10/0x10
[  525.977563][    C1]  panic+0xc5/0xd0
[  525.981272][    C1]  ? __pfx_panic+0x10/0x10
[  525.985679][    C1]  ? qdisc_pkt_len_segs_init+0x7f7/0xa30
[  525.991296][    C1]  ? qdisc_pkt_len_segs_init+0x7f7/0xa30
[  525.996912][    C1]  check_panic_on_warn+0x89/0xb0
[  526.001842][    C1]  ? qdisc_pkt_len_segs_init+0x7f7/0xa30
[  526.007466][    C1]  end_report+0x73/0x170
[  526.011711][    C1]  ? qdisc_pkt_len_segs_init+0x7f7/0xa30
[  526.017328][    C1]  kasan_report+0x128/0x150
[  526.021827][    C1]  ? qdisc_pkt_len_segs_init+0x7f7/0xa30
[  526.027446][    C1]  qdisc_pkt_len_segs_init+0x7f7/0xa30
[  526.032898][    C1]  __netif_receive_skb_core+0x13aa/0x30b0
[  526.038616][    C1]  ? __pfx___netif_receive_skb_core+0x10/0x10
[  526.044671][    C1]  ? __lock_acquire+0x683/0x2cf0
[  526.049603][    C1]  ? lock_acquire+0x106/0x350
[  526.054274][    C1]  ? __lock_acquire+0x683/0x2cf0
[  526.059202][    C1]  __netif_receive_skb_list_core+0x24d/0x830
[  526.065176][    C1]  ? __pfx___netif_receive_skb_list_core+0x10/0x10
[  526.071667][    C1]  ? ktime_expiry_to_cycles+0x4e/0x1e0
[  526.077119][    C1]  netif_receive_skb_list_internal+0x995/0xcf0
[  526.083261][    C1]  ? netif_receive_skb_list_internal+0x501/0xcf0
[  526.089575][    C1]  ? __pfx_netif_receive_skb_list_internal+0x10/0x10
[  526.096238][    C1]  ? dev_gro_receive+0x1097/0x2380
[  526.101344][    C1]  napi_complete_done+0x299/0x730
[  526.106356][    C1]  ? __pfx_napi_complete_done+0x10/0x10
[  526.111890][    C1]  ? gro_cell_poll+0x175/0x5d0
[  526.116646][    C1]  gro_cell_poll+0x5ab/0x5d0
[  526.121243][    C1]  ? gro_cell_poll+0x175/0x5d0
[  526.125998][    C1]  __napi_poll+0xaa/0x330
[  526.130317][    C1]  net_rx_action+0x61d/0xf50
[  526.134902][    C1]  ? __pfx_net_rx_action+0x10/0x10
[  526.140001][    C1]  ? xfrm_dev_backlog+0x24b/0x3c0
[  526.145023][    C1]  handle_softirqs+0x225/0x840
[  526.149775][    C1]  ? do_softirq+0x76/0xd0
[  526.154089][    C1]  ? tun_rx_batched+0x185/0x790
[  526.158928][    C1]  do_softirq+0x76/0xd0
[  526.163070][    C1]  </IRQ>
[  526.165986][    C1]  <TASK>
[  526.168899][    C1]  __local_bh_enable_ip+0xf8/0x130
[  526.173996][    C1]  ? tun_rx_batched+0x185/0x790
[  526.178837][    C1]  tun_rx_batched+0x616/0x790
[  526.183505][    C1]  ? __pfx_tun_rx_batched+0x10/0x10
[  526.188696][    C1]  ? tun_get_user+0x2717/0x4370
[  526.193539][    C1]  ? tun_get_user+0x2717/0x4370
[  526.198381][    C1]  ? tun_get_user+0x23cb/0x4370
[  526.203222][    C1]  ? tun_get_user+0x23cb/0x4370
[  526.208059][    C1]  ? __local_bh_enable_ip+0xd0/0x130
[  526.213332][    C1]  ? tun_get_user+0x2717/0x4370
[  526.218170][    C1]  ? tun_get_user+0x2717/0x4370
[  526.223009][    C1]  tun_get_user+0x2b44/0x4370
[  526.227681][    C1]  ? aa_file_perm+0x18b/0x15f0
[  526.232431][    C1]  ? aa_file_perm+0x4ed/0x15f0
[  526.237176][    C1]  ? __pfx_tun_get_user+0x10/0x10
[  526.242186][    C1]  ? __lock_acquire+0x683/0x2cf0
[  526.247112][    C1]  ? __pfx___futex_wait+0x10/0x10
[  526.252127][    C1]  ? ref_tracker_alloc+0x341/0x4b0
[  526.257224][    C1]  ? __pfx_ref_tracker_alloc+0x10/0x10
[  526.262671][    C1]  ? tun_get+0x1c/0x2f0
[  526.266821][    C1]  ? tun_get+0x1c/0x2f0
[  526.270976][    C1]  ? tun_get+0x1c/0x2f0
[  526.275118][    C1]  ? tun_get+0x1c/0x2f0
[  526.279263][    C1]  tun_chr_write_iter+0x113/0x200
[  526.284279][    C1]  vfs_write+0x612/0xba0
[  526.288524][    C1]  ? __pfx_vfs_write+0x10/0x10
[  526.293282][    C1]  ? __fget_files+0x2a/0x420
[  526.297863][    C1]  ksys_write+0x150/0x270
[  526.302188][    C1]  ? __pfx_ksys_write+0x10/0x10
[  526.307033][    C1]  ? entry_SYSCALL_64_after_hwframe+0x77/0x7f
[  526.313083][    C1]  do_syscall_64+0x174/0x580
[  526.317666][    C1]  ? trace_irq_disable+0x3b/0x140
[  526.322684][    C1]  ? clear_bhb_loop+0x40/0x90
[  526.327349][    C1]  entry_SYSCALL_64_after_hwframe+0x77/0x7f
[  526.333228][    C1] RIP: 0033:0x7f431539de59
[  526.337630][    C1] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48
[  526.357219][    C1] RSP: 002b:00007f4316258028 EFLAGS: 00000246 ORIG_RAX: 0000000000000001
[  526.365618][    C1] RAX: ffffffffffffffda RBX: 00007f4315625fa0 RCX: 00007f431539de59
[  526.373574][    C1] RDX: 000000000000fdef RSI: 0000200000000440 RDI: 0000000000000005
[  526.381529][    C1] RBP: 00007f4315433e6f R08: 0000000000000000 R09: 0000000000000000
[  526.389486][    C1] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000
[  526.397443][    C1] R13: 00007f4315626038 R14: 00007f4315625fa0 R15: 00007fff299039c8
[  526.405406][    C1]  </TASK>
[  526.408558][    C1] Kernel Offset: disabled
[  526.412860][    C1] Rebooting in 86400 seconds..